Time
S
Nick
Message
00:17 tomk-dv
http://pastebin.com/RJ8K4LeX not great yet. Seems not to like it if you turn off use https, but, it's because I don't have a good cert and it whines otherwise (requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581))
00:19 tomk-dv
Also, and maybe this is just me, but it is kinda weird that the only reference to changing the superuser login is upon installation. Details on modifying post-install could be under the securing section.
00:19 axfelix joined #dataverse
00:27 pdurbin
for now you have to use SWORD with https
00:29 pdurbin
http://guides.dataverse.org/en/4.3.1/installation/installation-main.html#superuser-account explains how the password is set
01:20 axfelix joined #dataverse
06:58 jri joined #dataverse
08:59 djbrooke joined #dataverse
13:50 djbrooke joined #dataverse
14:07 pameyer joined #dataverse
14:35 djbrooke joined #dataverse
14:59 djbrooke_ joined #dataverse
15:08 axfelix joined #dataverse
15:10 djbrooke joined #dataverse
15:13 djbrooke joined #dataverse
15:25 pameyer joined #dataverse
15:34 pameyer
pdurbin: is there a reason you're thinking to have the maintenance page in the code repo instead of the config repo?
15:37 pdurbin
pameyer: what config repo?
15:39 pameyer
ah - that might be the reason
15:39 pameyer
I'd just been thinking that "maintenance mode" was system configuration rather than application; but that might just have been because that was the first way that it occurred to me to handle it
15:52 pdurbin
We used to have "read-only" mode in DVN 3.x.
15:59 djbrooke joined #dataverse
16:09 Anuj__ joined #dataverse
17:28 garnett joined #dataverse
17:33 garnett joined #dataverse
17:36 djbrooke joined #dataverse
17:42 djbrooke joined #dataverse
17:44 pameyer joined #dataverse
17:53 djbrooke joined #dataverse
18:12 Anuj joined #dataverse
18:17 djbrooke joined #dataverse
18:26 donsizemore joined #dataverse
18:28 donsizemore
@pdurbin just a happy note that dataverse.unc.edu was approved for the R&S attribute bundle today, and we're working on an agreement with emory. i'll be whining about migration scripts before you know it!
18:28 djbrooke joined #dataverse
18:29 pdurbin
nice!
18:29 pdurbin
except for the whining ;)
18:34 pdurbin
donsizemore: are you working on an agreement with Harvard? I don't see Harvard as an option at https://dataverse.unc.edu
18:35 pameyer joined #dataverse
18:35 majestic joined #dataverse
18:47 donsizemore
@pdurbin: i'm happy to pursue one, but I thought they had told you no? or was that a no for any and sundry SP
18:48 pdurbin
uh
18:48 pdurbin
I'm not sure what they'd say.
18:49 pdurbin
in general I agree with Jan that we should encourage IdPs to join the R&S category
18:50 pdurbin
that way all of this is automated
18:56 * pdurbin
puts his feet up
18:58 djbrooke joined #dataverse
19:06 pdurbin
pameyer: whoa! I just noticed https://github.com/IQSS/dataverse/commits/dcm-beta ! :)
19:09 djbrooke joined #dataverse
19:12 djbrooke joined #dataverse
19:17 pameyer
pdurbin: bmckinney's been busy
19:18 pdurbin
:)
19:25 djbrooke joined #dataverse
19:29 pdurbin
bjonnh bricas_ donsizemore pameyer tomk-dv: any thoughts on how you'd like this to work? User account cannot be disabled/deactivated · Issue #2419 · IQSS/dataverse - https://github.com/IQSS/dataverse/issues/2419
19:38 pameyer joined #dataverse
19:52 pameyer
pdurbin: api access for disabling a user would work for me; not sure if that's what you're asking though
19:55 pdurbin
pameyer: I always write the API endpoint first. :) I'm thinking I'll use a timestamp called "expirationTime" (like milk) rather than a boolean called "disabled".
19:59 pameyer
is active/inactive still something that's checked for?
20:01 pdurbin
that's what I'm adding. the concept of checking if an account is active
20:01 pameyer
so the api endpoint is the smallest part
20:01 pdurbin
right
20:02 pameyer
are you thinking to do checks on the list of actions, or just login?
20:03 pdurbin
we have all of the api surface to consider so can't be just login. probably a check in the "command engine"
20:03 pdurbin
maybe other places too
20:07 pameyer
is token revocation out of scope?
20:07 pdurbin
hmm
20:08 pdurbin
for now this is how to revoke a token: http://guides.dataverse.org/en/4.3.1/installation/administration.html#deleting-an-api-token
20:11 pameyer
right - but does inactivating a user propagate to deactivating all their tokens?
20:20 djbrooke joined #dataverse
20:23 djbrooke joined #dataverse
20:28 pdurbin
It's a good question. I wasn't planning on doing that.
20:30 pameyer joined #dataverse
20:30 pameyer
it doesn't look like it's in the requirements; but that might be a bug in the requirements
20:31 pdurbin
there are requirements? :)
20:37 pameyer
somewhere :)
20:39 djbrooke joined #dataverse
20:39 pameyer
that was the inspiration for your script, right?
20:40 pdurbin
not sure which script you mean
20:41 pdurbin
pameyer: this is why I'm working on disabling accounts: https://github.com/IQSS/dataverse/issues/3153#issuecomment-229085993
20:42 pameyer
https://gist.github.com/pdurbin/5a98932c94055674278ebf47d241782e
20:43 pdurbin
oh yeah, that script
20:43 pdurbin
anyway, gotta run. happy to see that new branch
20:44 pameyer
tokens probably don't play with password guessing attempts; but being able to disable access for https://github.com/IQSS/dataverse/issues/2419 might propagate to tokens
20:52 bjonnh
pdurbin: is that possible to change them to dummy users? same visible id (so the datasets are not deleted), eventually same contact, but explicitely saying they are legacy accounts?
21:29 djbrooke joined #dataverse
21:35 djbrooke joined #dataverse
21:52 garnett joined #dataverse
22:03 garnett joined #dataverse
22:28 djbrooke joined #dataverse
22:56 pdurbin
bjonnh: yeah, still dummy users, I guess. They'd still be the creator of a dataset and in the dataset version history.
22:58 bjonnh
can you give an example of why you would want to delete users?
23:09 Anuj joined #dataverse
23:16 pdurbin
bjonnh: you probably wouldn't have a reason to delete a user. I often delete them in API tests I write just to tidy up.
23:48 pameyer joined #dataverse
