wellcomecollection / wellcomecollection.org

🪟 Wellcome Collection's website and services that support it
https://wellcomecollection.org
MIT License
37 stars 5 forks source link

Restricted items can be viewed after login by users with appropriate role #10940

Open kenoir opened 3 weeks ago

kenoir commented 3 weeks ago

What?

Staff users with the role StaffWithRestricted from Auth0 should be able to view restricted items after logging in.

At present works pages with restricted items hide those items, we should provide a mechanism to surface these to users logged in with the correct role.

The item viewer currently does not implement IIIF Auth 2, demonstrated by https://github.com/tomcrane/iiif-auth-client. We should update the item viewer so that it understands how to authenticate users for access to restricted items.

Why?

Currently there is no good way for the appropriate staff to view restricted items, this is necessary to allow staff to review these items.

Background

Part of https://github.com/wellcomecollection/platform/issues/5747

Done when