Dear Tim,
thank you very much!
Everything worked out!

Alex

среда, 26 июля 2023 г. в 20:36:07 UTC+3, DSpace Technical Support: 

Hi Alex, 

While that 'epersongroup2eperson' database table does manage group 
memberships, I would not recommend making direct changes to the database 
layer.  It's much safer to change group memberships via our REST API.  

For instance, here's the endpoint to add an EPerson to a Group:
https://github.com/DSpace/RestContract/blob/main/epersongroups.md#add-an-eperson-to-a-parent-group
(Additional options for working with groups can be found on that same 
page.)  If you ever want to know how to do something in the REST API, it's 
also possible to just perform that task in the User Interface and watch the 
requests sent by the UI to the REST API in your browser's DevTools 
"Network" tab.

The reason I recommend using the REST API is that it will also ensure that 
any necessary reindexing is completed in Solr to ensure that any new 
permissions appear in the User Interface.  If you make direct changes to 
the database layer, it's possible the UI will not recognize the new 
permissions entirely until you next reindex. 

Overall, we cannot recommend direct database changes unless absolutely 
necessary.  In any case, if you make direct database changes, you should 
fully test the impact of your changes, as it could result in some 
unexpected behavior in the UI....at least until you next reindex.

Tim
On Wednesday, July 26, 2023 at 1:44:25 AM UTC-5 zxale...@gmail.com wrote:

Dear Tim,
sorry for persistence.
Is it possible to change the eperson_group_id for the eperson_id in the 
database, in the epersongroup2eperson table? Will the group change or need 
to make any more changes to the database?



вторник, 25 июля 2023 г. в 22:59:26 UTC+3, DSpace Technical Support: 

Hi Alex,

Unfortunately, the OIDC plugin does not yet support this feature.  I don't 
see a configuration for it in 
https://wiki.lyrasis.org/display/DSDOC7x/Authentication+Plugins#AuthenticationPlugins-OpenIDConnect(OIDC)Authentication

There is a ticket requesting that this feature be created, but it's still 
waiting on a volunteer: https://github.com/DSpace/DSpace/issues/8406

Tim

On Monday, July 24, 2023 at 3:28:48 AM UTC-5 zxale...@gmail.com wrote:

Hi,
we don't use Authentication by Password.
Is it possible to add new EPerson to an existing group automatically via 
OIDC Authentication?

Best regards,
Alex

пятница, 21 июля 2023 г. в 22:37:19 UTC+3, DSpace Technical Support: 

Hi, 

When you register or create a new EPerson, it does not belong to any group 
by default.   So, I'm uncertain what you are asking about.

That said, depending on which authentication plugin you are using (by 
default DSpace uses "Authentication by Password"), some authorization 
plugins provide a way to automatically add everyone who logs in to a 
specific group.  That might be what you need.  Here's the docs on all our 
authentication plugins: 
https://wiki.lyrasis.org/display/DSDOC7x/Authentication+Plugins

Tim

On Tuesday, July 18, 2023 at 4:53:22 AM UTC-5 zxale...@gmail.com wrote:

Thanks for your reply, I have another question related to this.

Is it possible to change the default group when registering an e-person ? 
Do not register e-person in anonymous, but in somewhere other group.

четверг, 15 июня 2023 г. в 18:33:39 UTC+3, DSpace Technical Support: 

Yes, if you want to restrict the entire Collection, you can change it's 
Authorization policies.  By default all Collections have "READ" set to 
"Anonymous".  But, you can replace/change that policy to a different group 
(e.g. Administrators or similar).

The docs are available here: 
https://wiki.lyrasis.org/display/DSDOC7x/Edit+Collection#EditCollection-Authorizations

Tim

On Thursday, June 8, 2023 at 4:07:51 AM UTC-5 zxale...@gmail.com wrote:

Dear Colleagues,
Is it possible to restrict access to collection from unauthorized users?
(for example using Embargo)

Thank you.
---------------------
Dspace 7.4


-- 
All messages to this mailing list should adhere to the Code of Conduct: 
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to dspace-tech+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dspace-tech/d4d72a74-2515-4f63-9c59-63ef3116e5ebn%40googlegroups.com.

Reply via email to