Task #5812
MNDeployment #4700: IARC (International Arctic Research Center) Data Archive
Task #5759: IARC: Testing
Task #5788: IARC: Registration in environment (production)
Task #5811: IARC: Authentication and Authorization
IARC: Science Data access
100%
Description
Verify that Science Data has the correct read, write and updatePermissions permissions.
Verify that Science Data can be accessed only by users who have the required permissions.
History
#1 Updated by Laura Moyers over 10 years ago
- Target version changed from Deploy by end of Y5Q4 to Deploy by end of Y1Q1
#2 Updated by Laura Moyers about 10 years ago
- Target version changed from Deploy by end of Y1Q1 to Deploy by end of NCTE
#3 Updated by Mark Servilla over 9 years ago
- Assignee set to Mark Servilla
#4 Updated by Mark Servilla over 9 years ago
- Status changed from New to Closed
- % Done changed from 0 to 100
- translation missing: en.field_remaining_hours set to 0.0
The MN urn:node:IARC correctly blocks not authorized access to data objects:
curl -i -E ./cnode.pem -X GET https://trusty.iarc.uaf.edu/mn/v1/isAuthorized/iso19139_51695860-34d5-43fb-bfce-06cb534a0611_0?action=write
HTTP/1.1 401 UNAUTHORIZED
Date: Mon, 11 May 2015 20:14:02 GMT
Server: Apache/2.4.7 (Ubuntu)
Transfer-Encoding: chunked
Content-Type: application/xml
<?xml version="1.0" ?>write on "iso19139_51695860-34d5-43fb-bfce-06cb534a0611_0" denied. Active subjects: authenticatedUser (equivalent), CN=DataONE Production CA,DC=dataone,DC=org (primary), public (equivalent)
The MN urn:node:IARC correctly allows authorized access to data objects:
curl -i -E ./cnode.pem -X GET https://trusty.iarc.uaf.edu/mn/v1/isAuthorized/iso19139_51695860-34d5-43fb-bfce-06cb534a0611_0?action=read
HTTP/1.1 200 OK
Date: Mon, 11 May 2015 20:15:11 GMT
Server: Apache/2.4.7 (Ubuntu)
Content-Length: 2
Content-Type: text/plain
