Electronic journal access control: Difference between revisions

From RavenWiki
Jump to navigationJump to search
m (moved Athens Gateway access control to Electronic journal access control: Droped the Athens gateway a long time ago)
(Updated given the demise of teh Athens gateway)
 
Line 1: Line 1:
Use of the gateway is controlled by membership of groups and other attributes in [http://www.lookup.cam.ac.uk lookup].
Access to 'Library' electronic resources is controlled by membership of groups and other attributes in [http://www.lookup.cam.ac.uk lookup].


Anyone with a 'MIS status' of 'staff' or 'student' (or both) in lookup will get access to the majority of Athens resources, corresponding to the cam#default0 Athens permission set, by default. This will be correct for the majority of students and University (but not College) staff, but can be modified by group membership as follows:
Anyone with a 'MIS status' of 'staff' or 'student' (or both) in lookup will get access to the majority of electronic resources. This will be correct for the majority of students and University (but not College) staff, but can be modified by group membership as follows:


; [http://www.lookup.cam.ac.uk/group/100981 Shibboleth service Athens gateway overrides - staff]
; [http://www.lookup.cam.ac.uk/group/100981 Shibboleth service Athens gateway overrides - staff]
: Members of this group are granted access to the majority of Athens resources, corresponding to the cam#default0 Athens permission set, and to 'staff only' Athens resources, corresponding to the cam#staff Athens permission set. Membership of this group will only be required to grant access to students who are not have an MIS status' of 'staff'.
: Members of this group are granted access to the majority of electronic resources, and to 'staff only' resources. Membership of this group will only be required to grant access to people who are not have an 'MIS status' of 'staff'.


; [http://www.lookup.cam.ac.uk/group/100982 Shibboleth service Athens gateway overrides - students]
; [http://www.lookup.cam.ac.uk/group/100982 Shibboleth service Athens gateway overrides - students]
: Members of this group are granted access to the majority of Athens resources, corresponding to the cam#default0 Athens permission set. Membership of this group will only be required to grant access to students who are not have an MIS status' of 'student.
: Members of this group are granted access to the majority of electronic resources. Membership of this group will only be required to grant access to students who are not have an 'MIS status' of 'student.


; [http://www.lookup.cam.ac.uk/group/100927 Shibboleth service medical overrides]
; [http://www.lookup.cam.ac.uk/group/100927 Shibboleth service medical overrides]
: Members of this group are granted access to medically-restricted material, both via the gateway (corresponding to the cam#aaemo permission set) and directly via Shibboleth.
: Members of this group are granted access to medically-restricted material.


; [http://www.lookup.cam.ac.uk/group/100925 Shibboleth service Athens gateway blacklist]
; [http://www.lookup.cam.ac.uk/group/100925 Shibboleth service Athens gateway blacklist]
: Members of this group are administratively prohibited from accessing any resources via the Shibboleth to Athens gateway. This group is provided to implement short-term blocks in response to misuse, etc. This prohibition applies both to members of the two groups above and to anyone receiving access by default.
: Members of this group are administratively prohibited from accessing any electronic resources. This group is provided to implement short-term blocks in response to misuse, etc. This prohibition applies both to members of the two groups above and to anyone receiving access by default.


Membership of these three lists and other details about them are managed by the members of a fourth group, [http://www.lookup.cam.ac.uk/group/100924 Shibboleth service lookup group managers]. Members of this group can go to the 'Members' tab of any of these four lists and from there add or remove members. They can also edit other details of the four groups (such as title, access controls, etc.) but in general should avoid doing so.  
Membership of these three lists and other details about them are managed by the members of a fourth group, [http://www.lookup.cam.ac.uk/group/100924 Shibboleth service lookup group managers]. Members of this group can go to the 'Members' tab of any of these four lists and from there add or remove members. They can also edit other details of the four groups (such as title, access controls, etc.) but in general should avoid doing so.  


Members of a fifth group, [http://www.lookup.cam.ac.uk/group/100947 Shibboleth service lookup group readers] have read access to the membership lists of the other groups, but are n ot permitted to modify them.
Members of a fifth group, [http://www.lookup.cam.ac.uk/group/100947 Shibboleth service lookup group readers] have read access to the membership lists of the other groups, but are not permitted to modify them.
 
Once you have authenticated to the gateway it caches the permission set(s) that were allocated to you for up to 8 hours. As a result, changes to group membership don't immediately affect access control decisions even if you quit your browser and restart.

Latest revision as of 15:35, 20 June 2012

Access to 'Library' electronic resources is controlled by membership of groups and other attributes in lookup.

Anyone with a 'MIS status' of 'staff' or 'student' (or both) in lookup will get access to the majority of electronic resources. This will be correct for the majority of students and University (but not College) staff, but can be modified by group membership as follows:

Shibboleth service Athens gateway overrides - staff
Members of this group are granted access to the majority of electronic resources, and to 'staff only' resources. Membership of this group will only be required to grant access to people who are not have an 'MIS status' of 'staff'.
Shibboleth service Athens gateway overrides - students
Members of this group are granted access to the majority of electronic resources. Membership of this group will only be required to grant access to students who are not have an 'MIS status' of 'student.
Shibboleth service medical overrides
Members of this group are granted access to medically-restricted material.
Shibboleth service Athens gateway blacklist
Members of this group are administratively prohibited from accessing any electronic resources. This group is provided to implement short-term blocks in response to misuse, etc. This prohibition applies both to members of the two groups above and to anyone receiving access by default.

Membership of these three lists and other details about them are managed by the members of a fourth group, Shibboleth service lookup group managers. Members of this group can go to the 'Members' tab of any of these four lists and from there add or remove members. They can also edit other details of the four groups (such as title, access controls, etc.) but in general should avoid doing so.

Members of a fifth group, Shibboleth service lookup group readers have read access to the membership lists of the other groups, but are not permitted to modify them.