[kepler-dev] [Bug 5248] downloading non-public kars from Search Components doesn't work

[bugzilla-daemon at ecoinformatics.org]

http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5248

ben leinfelder <leinfelder at nceas.ucsb.edu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |leinfelder at nceas.ucsb.edu

--- Comment #4 from ben leinfelder <leinfelder at nceas.ucsb.edu> 2011-01-19 21:11:31 PST ---
A) I don't believe it makes sense to have non-public entries showing up in the
public searches. I can see how this error case might exist: we search for
KarXML but download the actual Kar. If the KarXML is readable by the public,
then it is included in the public search. If this is indeed the TFRI case only,
then I think it's an error that happened when I was trying to share a workflow
at the TFRI tutorial (Oct 2010). The valid assumption should be that if it is
in your search results, it should be readable. The "it" being different objects
in our implementation, but logically one and the same.
B) The service includes methods for query() and read(). There are two versions
of this service and one takes an authentication credential. If an invalid
(null) credential is given, the authenticated version of the service acts
exactly like the non-authenticated version of the service. 
C) It sounds like we should only be using the authenticated version of the
service and relying on the AuthenticationManager for the credential. The
AuthenticationManager will provide a credential if it has one, or prompt for
user/pass in order to get one. After a "cancel" event it would be nice if it
did not prompt again as this could get very annoying.

-- 
Configure bugmail: http://bugzilla.ecoinformatics.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.