IQSS logo

IRC log for #dataverse, 2016-06-28

Connect via chat.dataverse.org to discuss Dataverse (dataverse.org, an open source web application for sharing, citing, analyzing, and preserving research data) with users and developers.

| Channels | #dataverse index | Today | | Search | Google Search | Plain-Text | plain, newest first | summary

All times shown according to UTC.

Time S Nick Message
00:17 tomk-dv http://pastebin.com/RJ8K4LeX not great yet. Seems not to like it if you turn off use https, but, it's because I don't have a good cert and it whines otherwise (requests.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581))
00:19 tomk-dv Also, and maybe this is just me, but it is kinda weird that the only reference to changing the superuser login is upon installation. Details on modifying post-install could be under the securing section.
00:19 axfelix joined #dataverse
00:27 pdurbin for now you have to use SWORD with https
00:29 pdurbin http://guides.dataverse.org/en/4.3.1/installation/installation-main.html#superuser-account explains how the password is set
01:20 axfelix joined #dataverse
06:58 jri joined #dataverse
08:59 djbrooke joined #dataverse
13:50 djbrooke joined #dataverse
14:07 pameyer joined #dataverse
14:35 djbrooke joined #dataverse
14:59 djbrooke_ joined #dataverse
15:08 axfelix joined #dataverse
15:10 djbrooke joined #dataverse
15:13 djbrooke joined #dataverse
15:25 pameyer joined #dataverse
15:34 pameyer pdurbin: is there a reason you're thinking to have the maintenance page in the code repo instead of the config repo?
15:37 pdurbin pameyer: what config repo?
15:39 pameyer ah - that might be the reason
15:39 pameyer I'd just been thinking that "maintenance mode" was system configuration rather than application; but that might just have been because that was the first way that it occurred to me to handle it
15:52 pdurbin We used to have "read-only" mode in DVN 3.x.
15:59 djbrooke joined #dataverse
16:09 Anuj__ joined #dataverse
17:28 garnett joined #dataverse
17:33 garnett joined #dataverse
17:36 djbrooke joined #dataverse
17:42 djbrooke joined #dataverse
17:44 pameyer joined #dataverse
17:53 djbrooke joined #dataverse
18:12 Anuj joined #dataverse
18:17 djbrooke joined #dataverse
18:26 donsizemore joined #dataverse
18:28 donsizemore @pdurbin just a happy note that dataverse.unc.edu was approved for the R&S attribute bundle today, and we're working on an agreement with emory. i'll be whining about migration scripts before you know it!
18:28 djbrooke joined #dataverse
18:29 pdurbin nice!
18:29 pdurbin except for the whining ;)
18:34 pdurbin donsizemore: are you working on an agreement with Harvard? I don't see Harvard as an option at https://dataverse.unc.edu
18:35 pameyer joined #dataverse
18:35 majestic joined #dataverse
18:47 donsizemore @pdurbin: i'm happy to pursue one, but I thought they had told you no? or was that a no for any and sundry SP
18:48 pdurbin uh
18:48 pdurbin I'm not sure what they'd say.
18:49 pdurbin in general I agree with Jan that we should encourage IdPs to join the R&S category
18:50 pdurbin that way all of this is automated
18:56 * pdurbin puts his feet up
18:58 djbrooke joined #dataverse
19:06 pdurbin pameyer: whoa! I just noticed https://github.com/IQSS/dataverse/commits/dcm-beta ! :)
19:09 djbrooke joined #dataverse
19:12 djbrooke joined #dataverse
19:17 pameyer pdurbin: bmckinney's been busy
19:18 pdurbin :)
19:25 djbrooke joined #dataverse
19:29 pdurbin bjonnh bricas_ donsizemore pameyer tomk-dv: any thoughts on how you'd like this to work? User account cannot be disabled/deactivated · Issue #2419 · IQSS/dataverse - https://github.com/IQSS/dataverse/issues/2419
19:38 pameyer joined #dataverse
19:52 pameyer pdurbin: api access for disabling a user would work for me; not sure if that's what you're asking though
19:55 pdurbin pameyer: I always write the API endpoint first. :) I'm thinking I'll use a timestamp called "expirationTime" (like milk) rather than a boolean called "disabled".
19:59 pameyer is active/inactive still something that's checked for?
20:01 pdurbin that's what I'm adding. the concept of checking if an account is active
20:01 pameyer so the api endpoint is the smallest part
20:01 pdurbin right
20:02 pameyer are you thinking to do checks on the list of actions, or just login?
20:03 pdurbin we have all of the api surface to consider so can't be just login. probably a check in the "command engine"
20:03 pdurbin maybe other places too
20:07 pameyer is token revocation out of scope?
20:07 pdurbin hmm
20:08 pdurbin for now this is how to revoke a token: http://guides.dataverse.org/en/4.3.1/installation/administration.html#deleting-an-api-token
20:11 pameyer right - but does inactivating a user propagate to deactivating all their tokens?
20:20 djbrooke joined #dataverse
20:23 djbrooke joined #dataverse
20:28 pdurbin It's a good question. I wasn't planning on doing that.
20:30 pameyer joined #dataverse
20:30 pameyer it doesn't look like it's in the requirements; but that might be a bug in the requirements
20:31 pdurbin there are requirements? :)
20:37 pameyer somewhere :)
20:39 djbrooke joined #dataverse
20:39 pameyer that was the inspiration for your script, right?
20:40 pdurbin not sure which script you mean
20:41 pdurbin pameyer: this is why I'm working on disabling accounts: https://github.com/IQSS/dataverse/issues/3153#issuecomment-229085993
20:42 pameyer https://gist.github.com/pdurbin/5a98932c94055674278ebf47d241782e
20:43 pdurbin oh yeah, that script
20:43 pdurbin anyway, gotta run. happy to see that new branch
20:44 pameyer tokens probably don't play with password guessing attempts; but being able to disable access for https://github.com/IQSS/dataverse/issues/2419 might propagate to tokens
20:52 bjonnh pdurbin: is that possible to change them to dummy users? same visible id (so the datasets are not deleted), eventually same contact, but explicitely saying they are legacy accounts?
21:29 djbrooke joined #dataverse
21:35 djbrooke joined #dataverse
21:52 garnett joined #dataverse
22:03 garnett joined #dataverse
22:28 djbrooke joined #dataverse
22:56 pdurbin bjonnh: yeah, still dummy users, I guess. They'd still be the creator of a dataset and in the dataset version history.
22:58 bjonnh can you give an example of why you would want to delete users?
23:09 Anuj joined #dataverse
23:16 pdurbin bjonnh: you probably wouldn't have a reason to delete a user. I often delete them in API tests I write just to tidy up.
23:48 pameyer joined #dataverse

| Channels | #dataverse index | Today | | Search | Google Search | Plain-Text | plain, newest first | summary

Connect via chat.dataverse.org to discuss Dataverse (dataverse.org, an open source web application for sharing, citing, analyzing, and preserving research data) with users and developers.