NEU-Libraries / cerberus

Digital Repository Service
8 stars 0 forks source link

Restricted files in the Associated Files tab #1099

Closed sarahjeansweeney closed 7 years ago

sarahjeansweeney commented 7 years ago

It looks like the Associated Files tab displays all associated files, regardless of whether the user is able to view the associated files.

For example, this core file is public and has one associated file: https://repository.library.northeastern.edu/files/neu:cj82n4604

The associated file (https://repository.library.northeastern.edu/files/neu:cj82n4647) is a master file that Archives has chosen to restrict to only two groups.

I viewed the file before I signed in and noticed that the restricted file shows up in the Associated Files tab:

2017-05-30_1007

Clicking on it opens up the Shib login page. This is fine for now, but we should continue the practice of not showing users things they can't access. If possible, the user should be presented with the Associated Files tab only if s/he can access the associated file(s).

dgcliff commented 7 years ago

Have a patch for this, just running it through some tests.