Re: [EP-tech] Eprints-tech Digest, Vol 127, Issue 17

John Salter via Eprints-tech <[email protected]>
Newsgroups gmane.comp.web.eprints.devel
Message-ID <EMEW3|a5fcb0b62055e0d7fa604a0e1896a418v3BDsR14eprints-tech-bounces|ecs.soton.ac.uk|DB6PR0302MB2711913C68009D191975A112C4280@DB6PR0302MB2711.eurprd03.prod.outlook.com>
Excellent!

A question for others (possibly to David or other core-committers):

This issue has come up a few times previously on the tech-list.
It's quite a bad situation in terms of the impact of this issue.

Should we attempt to introduce a warning somehow e.g. at Apache startup, or from a 'bin/epadmin test' that warns of possibly dangerous configuration like this?

This specific issue is difficult - the repository appears to be normal - and working as expected…

Cheers,
John

From: [email protected] [mailto:[email protected]] On Behalf Of Denis Munyua via Eprints-tech
Sent: 12 April 2019 13:02
To: [email protected]
Subject: Re: [EP-tech] Eprints-tech Digest, Vol 127, Issue 17

Thank you,

It was broken and commenting the "$r->connection->remote_ip' line under ~/archives/[ARCHIVEID]/cfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=U6sfItaRvDBcD94PLx0bb2B41Jv3IP0dwa4OtYkxl6g%3D&amp;reserved=0> fixed the issue.


Sincerely,


On Fri, Apr 12, 2019 at 1:53 PM <[email protected]<mailto:[email protected]>> wrote:
Send Eprints-tech mailing list submissions to
        [email protected]<mailto:[email protected]>

To subscribe or unsubscribe via the World Wide Web, visit
        http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
or, via email, send a message with subject or body 'help' to
        [email protected]<mailto:[email protected]>

You can reach the person managing the list at
        [email protected]<mailto:[email protected]>

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Eprints-tech digest..."


Today's Topics:

   1. Re: Security Level (Visible to:) (Newman D.R.)
   2. Re: Security Level (Visible to:) (John Salter)


----------------------------------------------------------------------

Message: 1
Date: Fri, 12 Apr 2019 10:04:43 +0000
From: "Newman D.R." <[email protected]<mailto:[email protected]>>
Subject: Re: [EP-tech] Security Level (Visible to:)
To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>,
        "Denis  Munyua" <[email protected]<mailto:[email protected]>>
Message-ID:
        <EMEW3|bb7e13e12db0ebda93b5f99911a1dfbav3BB4v03drn|ecs.soton.ac.uk<http://ecs.soton.ac.uk>|[email protected]<mailto:[email protected]>>

Content-Type: text/plain; charset="utf-8"

Hi Denis,

To confirm, you have been running Apache 2.4.25 (or at least some
version of 2.4) for some time prior to upgrading to EPrints to 3.3.16
and the problem with being able to access something you should not be
able to was not present directly prior to upgrading EPrints to 3.3.16?

Regards

David Newman

On Fri, 2019-04-12 at 12:28 +0300, Denis Munyua via Eprints-tech wrote:
> Hi John,
>
> Yes I upgraded from a previous version 3.3.* and this is not a cached
> copy. Am currently running:
> Apache/2.4.25 (Debian)
> Eprints 3.3.16
> Thanks,
>
> On Fri, Apr 12, 2019 at 12:10 PM <[email protected]
<mailto:[email protected]%0b>> k> wrote:
> > Send Eprints-tech mailing list submissions to
> >         [email protected]<mailto:[email protected]>
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >         http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tec
> > h
> > or, via email, send a message with subject or body 'help' to
> >         [email protected]<mailto:[email protected]>
> >
> > You can reach the person managing the list at
> >         [email protected]<mailto:[email protected]>
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Eprints-tech digest..."
> >
> >
> > Today's Topics:
> >
> >    1. Re: Security Level (Visible to:) (John Salter)
> >    2. Re: Security Level (Visible to:) (Yuri)
> >
> >
> > -----------------------------------------------------------------
> > -----
> >
> > Message: 1
> > Date: Fri, 12 Apr 2019 08:58:16 +0000
> > From: John Salter <[email protected]<mailto:[email protected]>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>,
> >         "Denis  Munyua" <[email protected]<mailto:[email protected]>>
> > Message-ID:
> >         <[email protected]
<mailto:[email protected]%0b>> > urprd03.prod.outlook.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Furprd03.prod.outlook.com&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=kYnttQGnpWGI2tNbEvOl7Ia%2FqjPUfl74u7wQMwsROMk%3D&amp;reserved=0>>
> >
> > Content-Type: text/plain; charset="utf-8"
> >
> > Hi Denis,
> >
> > Which version of Apache are you running (probably 2.2 or 2.4)?
> > Which version of EPrints are you running?
> > Have you upgraded EPrints from a previous version?
> >
> > Cheers,
> > John
> >
> >
> > From: [email protected]<mailto:[email protected]> [mailto:eprints-tech-bou<mailto:eprints-tech-bou>
> > [email protected]<mailto:[email protected]>] On Behalf Of Denis Munyua via Eprints-tech
> > Sent: 12 April 2019 09:43
> > To: [email protected]<mailto:[email protected]>
> > Subject: [EP-tech] Security Level (Visible to:)
> >
> > Greetings,
> >
> > I set up a repository some time back and I noticed that even after
> > setting the security level for the [Thesis / Dissertation] to
> > [Repository Staff Only] users are still able to view and download
> > the full text.
> >
> > Please advise.
> >
> > --
> >
> > Denis Muny?a
> > P.O. Box 12510- 00100 | Nairobi, Kenya
> > Mobile: +254 720760340
> > Skype: denis.munyua
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachme
> > nts/20190412/8137bfce/attachment-0001.html
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Fri, 12 Apr 2019 11:09:49 +0200
> > From: Yuri <[email protected]<mailto:[email protected]>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: <[email protected]<mailto:[email protected]>>
> > Message-ID: <[email protected]<mailto:[email protected]>>
> > Content-Type: text/plain; charset="utf-8"; format=flowed
> >
> > It is the cache in the browser?
> >
> > Il 12/04/19 10:58, John Salter via Eprints-tech ha scritto:
> > >
> > > Hi Denis,
> > >
> > > Which version of Apache are you running (probably 2.2 or 2.4)?
> > >
> > > Which version of EPrints are you running?
> > >
> > > Have you upgraded EPrints from a previous version?
> > >
> > > Cheers,
> > >
> > > John
> > >
> > > *From:*[email protected]<mailto:[email protected]>
> > > [mailto:[email protected]<mailto:[email protected]>] *On Behalf Of
> > *Denis
> > > Munyua via Eprints-tech
> > > *Sent:* 12 April 2019 09:43
> > > *To:* [email protected]<mailto:[email protected]>
> > > *Subject:* [EP-tech] Security Level (Visible to:)
> > >
> > > Greetings,
> > >
> > > I set up a repository some time back and I noticed that even
> > after
> > > setting the security level for the [Thesis / Dissertation] to
> > > [Repository Staff Only] users are still able to view and download
> > the
> > > full text.
> > >
> > > Please advise.
> > >
> > > --
> > >
> > > Denis Muny?a
> > > P.O. Box 12510- 00100 | Nairobi, Kenya
> > > Mobile: +254 720760340
> > > Skype: denis.munyua
> > >
> > >
> > > *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/epri
> > nts-tech
> > > *** Archive: https://eur03.safelinks.protection.outlook.com/?url=
> > http%3A%2F%2Fwww.eprints.org<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F2Fwww.eprints.org&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=%2BjXzTW1oToGeBfSgRXiv9chuRDSLvpoy8kW72spuu6M%3D&amp;reserved=0>%2Ftech.php%2F&amp;data=01%7C01%7Ceprin
> > ts-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=5eRCuJUkBrHye1LeOIuuJOHRa5V
> > Q8KXpnhH%2Bh4Mu0Ac%3D&amp;reserved=0
> > > *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&amp;reserved=0>
> > tlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7C<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftlook.com%2F%3Furl%3Dhttp%253A%252F%252Fwiki.eprints.org%252F%26data%3D01%257C01%257C&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=r6glK6CDy5FbLFBvgHcb8LerAHH5qFOLfERiS%2BlFkrs%3D&amp;reserved=0>
> > eprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=v%2FsHnQc%2BCdgX9o9xIrMCr2U
> > t62A%2FxlhTv%2FB8XdyB5pM%3D&amp;reserved=0
> > > *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&amp;reserved=0>.
> > outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Foutlook.com%2F%3Furl%3Dhttp%253A%252F%252Fforum.eprints.org%252F%26data%3D01%257C01&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=XoDKFxgMQUVKNyU9NcfWRHxck8awI2E8CJ%2BjHDFTELI%3D&amp;reserved=0>
> > %7Ceprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=R6hKGnEdFkMlPqvLrpn0tvhY99Z
> > mLCtfzS4RFPCemzA%3D&amp;reserved=0
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Eprints-tech mailing list
> > [email protected]<mailto:[email protected]>
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> >
> >
> > End of Eprints-tech Digest, Vol 127, Issue 15
> > *********************************************
> >
>
> --
> Denis Muny?a
> P.O. Box 12510- 00100 | Nairobi, Kenya
> Mobile: +254 720760340
> Skype: denis.munyua
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-
> tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0>
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0>
> *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0>



------------------------------

Message: 2
Date: Fri, 12 Apr 2019 10:52:41 +0000
From: John Salter <[email protected]<mailto:[email protected]>>
Subject: Re: [EP-tech] Security Level (Visible to:)
To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>,
        "Newman D.R." <[email protected]<mailto:[email protected]>>,    "Denis  Munyua"
        <[email protected]<mailto:[email protected]>>
Message-ID:
        <DB6PR0302MB27114368373B6EAF3630F474C4280@DB6PR0302MB2711.eurprd03.prod.outlook.com<mailto:DB6PR0302MB27114368373B6EAF3630F474C4280@DB6PR0302MB2711.eurprd03.prod.outlook.com>>

Content-Type: text/plain; charset="utf-8"

Hi Denis,
You should take a look at you file:

~/archives/[ARCHIVEID]/cfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&amp;reserved=0>
And compare it with:
~/lib/defaultcfg/cfg.d/security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&amp;reserved=0>

If in your archive copy of security.pl<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsecurity.pl&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=WdSY7yaeDFLNQuTnogs3C5MD8DU7ga5F%2FNVLNpf6WcQ%3D&amp;reserved=0> you have a reference to:
    $r->connection->remote_ip
Under Apache 2.4, it will be broken.

This explains it: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F214&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=pfApqCezL7RePp0wTNdfC6gPsNF%2FqygHXR%2BoZd7EuIw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F214&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=pfApqCezL7RePp0wTNdfC6gPsNF%2FqygHXR%2BoZd7EuIw%3D&amp;reserved=0>

Let me know if you need more help!
Cheers,
John

-----Original Message-----
From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Newman D.R. via Eprints-tech
Sent: 12 April 2019 11:05
To: [email protected]<mailto:[email protected]>; Denis Munyua <[email protected]<mailto:[email protected]>>
Subject: Re: [EP-tech] Security Level (Visible to:)

Hi Denis,

To confirm, you have been running Apache 2.4.25 (or at least some
version of 2.4) for some time prior to upgrading to EPrints to 3.3.16
and the problem with being able to access something you should not be
able to was not present directly prior to upgrading EPrints to 3.3.16?

Regards

David Newman

On Fri, 2019-04-12 at 12:28 +0300, Denis Munyua via Eprints-tech wrote:
> Hi John,
>
> Yes I upgraded from a previous version 3.3.* and this is not a cached
> copy. Am currently running:
> Apache/2.4.25 (Debian)
> Eprints 3.3.16
> Thanks,
>
> On Fri, Apr 12, 2019 at 12:10 PM <[email protected]
<mailto:[email protected]%0b>> k> wrote:
> > Send Eprints-tech mailing list submissions to
> >         [email protected]<mailto:[email protected]>
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >         http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tec
> > h
> > or, via email, send a message with subject or body 'help' to
> >         [email protected]<mailto:[email protected]>
> >
> > You can reach the person managing the list at
> >         [email protected]<mailto:[email protected]>
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Eprints-tech digest..."
> >
> >
> > Today's Topics:
> >
> >    1. Re: Security Level (Visible to:) (John Salter)
> >    2. Re: Security Level (Visible to:) (Yuri)
> >
> >
> > -----------------------------------------------------------------
> > -----
> >
> > Message: 1
> > Date: Fri, 12 Apr 2019 08:58:16 +0000
> > From: John Salter <[email protected]<mailto:[email protected]>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>,
> >         "Denis  Munyua" <[email protected]<mailto:[email protected]>>
> > Message-ID:
> >         <[email protected]
<mailto:[email protected]%0b>> > urprd03.prod.outlook.com<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Furprd03.prod.outlook.com&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=kYnttQGnpWGI2tNbEvOl7Ia%2FqjPUfl74u7wQMwsROMk%3D&amp;reserved=0>>
> >
> > Content-Type: text/plain; charset="utf-8"
> >
> > Hi Denis,
> >
> > Which version of Apache are you running (probably 2.2 or 2.4)?
> > Which version of EPrints are you running?
> > Have you upgraded EPrints from a previous version?
> >
> > Cheers,
> > John
> >
> >
> > From: [email protected]<mailto:[email protected]> [mailto:eprints-tech-bou<mailto:eprints-tech-bou>
> > [email protected]<mailto:[email protected]>] On Behalf Of Denis Munyua via Eprints-tech
> > Sent: 12 April 2019 09:43
> > To: [email protected]<mailto:[email protected]>
> > Subject: [EP-tech] Security Level (Visible to:)
> >
> > Greetings,
> >
> > I set up a repository some time back and I noticed that even after
> > setting the security level for the [Thesis / Dissertation] to
> > [Repository Staff Only] users are still able to view and download
> > the full text.
> >
> > Please advise.
> >
> > --
> >
> > Denis Muny?a
> > P.O. Box 12510- 00100 | Nairobi, Kenya
> > Mobile: +254 720760340
> > Skype: denis.munyua
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachme
> > nts/20190412/8137bfce/attachment-0001.html
> >
> > ------------------------------
> >
> > Message: 2
> > Date: Fri, 12 Apr 2019 11:09:49 +0200
> > From: Yuri <[email protected]<mailto:[email protected]>>
> > Subject: Re: [EP-tech] Security Level (Visible to:)
> > To: <[email protected]<mailto:[email protected]>>
> > Message-ID: <[email protected]<mailto:[email protected]>>
> > Content-Type: text/plain; charset="utf-8"; format=flowed
> >
> > It is the cache in the browser?
> >
> > Il 12/04/19 10:58, John Salter via Eprints-tech ha scritto:
> > >
> > > Hi Denis,
> > >
> > > Which version of Apache are you running (probably 2.2 or 2.4)?
> > >
> > > Which version of EPrints are you running?
> > >
> > > Have you upgraded EPrints from a previous version?
> > >
> > > Cheers,
> > >
> > > John
> > >
> > > *From:*[email protected]<mailto:[email protected]>
> > > [mailto:[email protected]<mailto:[email protected]>] *On Behalf Of
> > *Denis
> > > Munyua via Eprints-tech
> > > *Sent:* 12 April 2019 09:43
> > > *To:* [email protected]<mailto:[email protected]>
> > > *Subject:* [EP-tech] Security Level (Visible to:)
> > >
> > > Greetings,
> > >
> > > I set up a repository some time back and I noticed that even
> > after
> > > setting the security level for the [Thesis / Dissertation] to
> > > [Repository Staff Only] users are still able to view and download
> > the
> > > full text.
> > >
> > > Please advise.
> > >
> > > --
> > >
> > > Denis Muny?a
> > > P.O. Box 12510- 00100 | Nairobi, Kenya
> > > Mobile: +254 720760340
> > > Skype: denis.munyua
> > >
> > >
> > > *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/epri
> > nts-tech
> > > *** Archive: https://eur03.safelinks.protection.outlook.com/?url=
> > http%3A%2F%2Fwww.eprints.org<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2F2Fwww.eprints.org&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=%2BjXzTW1oToGeBfSgRXiv9chuRDSLvpoy8kW72spuu6M%3D&amp;reserved=0>%2Ftech.php%2F&amp;data=01%7C01%7Ceprin
> > ts-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=5eRCuJUkBrHye1LeOIuuJOHRa5V
> > Q8KXpnhH%2Bh4Mu0Ac%3D&amp;reserved=0
> > > *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection.ou&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=Bea2lIUpuAe66LbwdtN6gYLGm7HfSssv0riawtKtkOg%3D&amp;reserved=0>
> > tlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7C<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftlook.com%2F%3Furl%3Dhttp%253A%252F%252Fwiki.eprints.org%252F%26data%3D01%257C01%257C&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=r6glK6CDy5FbLFBvgHcb8LerAHH5qFOLfERiS%2BlFkrs%3D&amp;reserved=0>
> > eprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=v%2FsHnQc%2BCdgX9o9xIrMCr2U
> > t62A%2FxlhTv%2FB8XdyB5pM%3D&amp;reserved=0
> > > *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Feur03.safelinks.protection&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=sVXsA6gMYgx9w4KI0ilMqpuLX6N7QbxY4gbNYNggbgg%3D&amp;reserved=0>.
> > outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Foutlook.com%2F%3Furl%3Dhttp%253A%252F%252Fforum.eprints.org%252F%26data%3D01%257C01&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=XoDKFxgMQUVKNyU9NcfWRHxck8awI2E8CJ%2BjHDFTELI%3D&amp;reserved=0>
> > %7Ceprints-
> > tech%40ecs.soton.ac.uk<http://40ecs.soton.ac.uk>%7Cd415218c525a4b96b87b08d6bf26a095%7C4a5378f
> > 929f44d3ebe89669d03ada9d8%7C0&amp;sdata=R6hKGnEdFkMlPqvLrpn0tvhY99Z
> > mLCtfzS4RFPCemzA%3D&amp;reserved=0
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Eprints-tech mailing list
> > [email protected]<mailto:[email protected]>
> > http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> >
> >
> > End of Eprints-tech Digest, Vol 127, Issue 15
> > *********************************************
> >
>
> --
> Denis Muny?a
> P.O. Box 12510- 00100 | Nairobi, Kenya
> Mobile: +254 720760340
> Skype: denis.munyua
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-
> tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0>
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0>
> *** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0>

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=c11feCREGA17OP0lmoYJZ2Aei2rQWCgiH39AkXHaDNA%3D&amp;reserved=0>
*** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=u49Y5fsnHEE2ZasBRAP8B72OBbuHFnAn%2FdXfH4N%2B4vw%3D&amp;reserved=0>
*** EPrints developers Forum: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fforum.eprints.org%2F&amp;data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C5a58eb3c404048bb9e4208d6bf45ea3f%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&amp;sdata=x4GDnoi%2BcR203dk1fshCgNosOwgnihYhQIQ6G9bBsIw%3D&amp;reserved=0>



------------------------------

_______________________________________________
Eprints-tech mailing list
[email protected]<mailto:[email protected]>
http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech


End of Eprints-tech Digest, Vol 127, Issue 17
*********************************************


--

Denis Munyũa
P.O. Box 12510- 00100 | Nairobi, Kenya
Mobile: +254 720760340
Skype: denis.munyua

*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/
*** EPrints developers Forum: http://forum.eprints.org/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.