<div dir="ltr"><div><div><div>Hugo,<br><br></div>Based on what I understand, the best path forward is to have a view_metadata permission that you use to enforce the behavior you want. Assigning a new meaning to the existing permission may be problematic for other users with different needs (for example where metadata is sensitive information).<br><br></div>The place where we want to get to, is to allow uploaders to restrict any actions they want, but give the end user buttons to request permissions (to view if they cannot view, to download if they can only view, to edit if the can only download) to encourage a conversation between uploaders and users and provide a workflow to allow access to information when it is needed.<br><br>The changes you make would be good candidates for inclusion in the main version of GeoNode so others can benefit in the future. Hopefully others (Paolo?) can chime in with more specific feedback.<br><br></div><div>Best,<br></div><div>Ariel.<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 9, 2015 at 7:56 AM, FERRARI Hugo <span dir="ltr"><<a href="mailto:ferrari_hugo@yahoo.fr" target="_blank">ferrari_hugo@yahoo.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello everyone,<br>
I have installed a complete geonode instance on a developpement server.<br>
I want to change thebehaviorofthesoftware to make it fit the need of the institution I work for.<br>
So i'm looking for some advices because I didn't manage to code it yet.<br>
<br>
My aim to separate metada access from the data access.<br>
That is to make all the layers uploaded in geoserver VISIBLE for all users (logged or not) but only in the layer-list page , not on the layer-detail page .<br>
If you click on any specific layer in the layer-list (or document-list because i want the same behavior for both), you get the layer detail so you what will see is:<br>
<br>
- In the case you have the view_resourcebase permission (who can see it ?), you will see the current template corresponding to layer_detail.html: both access to datas and metadatas.<br>
- In the other case if you don't have the view_resourcebase permission, you 'll only have access to metadatas's ressource (that means a template similar to layer_detail.html but Instead of the geoexplorer frame you sould have a "permission denied" message, but the possibility to retrieve metadata).<br>
<br>
It's quite simple to make all the layers visible in the layer list, whoever is logged in (you just have to modify SKIP_PERMS_FILTERS in settings.py AND read_list function in module api/authorisation.py).<br>
but the actual behavior is to catch a 403 http error when trying to view the layer detail.<br>
Modifying the 403.html template does not seems to be the good way to process.<br>
I don't think it is necessary to modify geonode's database model because the view_ressource permission is enough, considering that viewing the ressource is equivalent to having access to the data (even if you can't download it). There's no need to add a new kind of permissions, as far as I can guess.<br>
What is prefered is not throwing a 403 error but just the layer_detail.html template modified to get only metadatas.<br>
<br>
I hope the explanation was clear enough,<br>
Thanks for your advices<br>
Hugo FERRARI<br>
<br>
PS<br>
Does it correspond to the actual geonode developpement policy ?<br>
Datas and metada are strongly linked in this software.<br>
Could this functionnality be interresting for any other geonode users?<br>
<br>
<br>
<br>
Le 08/06/2015 23:00, <a href="mailto:geonode-users-request@lists.osgeo.org" target="_blank">geonode-users-request@lists.osgeo.org</a> a écrit :<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Send geonode-users mailing list submissions to<br>
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users" target="_blank">http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:geonode-users-request@lists.osgeo.org" target="_blank">geonode-users-request@lists.osgeo.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:geonode-users-owner@lists.osgeo.org" target="_blank">geonode-users-owner@lists.osgeo.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of geonode-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: osgeo module install problem (Simone Dalmasso)<br>
2. Problems to Translate Geonode - Transifex - Portuguese<br>
(Brazil) (Davi Custodio)<br>
3. Re: Problems to Translate Geonode - Transifex - Portuguese<br>
(Brazil) (Julien Collaer)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sun, 7 Jun 2015 21:40:13 +0200<br>
From: Simone Dalmasso <<a href="mailto:simone.dalmasso@gmail.com" target="_blank">simone.dalmasso@gmail.com</a>><br>
To: Vicente <<a href="mailto:deluca.vicente@gmail.com" target="_blank">deluca.vicente@gmail.com</a>><br>
Cc: geonode-users <<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a>><br>
Subject: Re: [GeoNode-users] osgeo module install problem<br>
Message-ID:<br>
<CAAHAC+cU9GgbBUe-ocH4GJZ1PaXEZDrY5W=<a href="mailto:ZCsTzSUSx5ymVvA@mail.gmail.com" target="_blank">ZCsTzSUSx5ymVvA@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
Hi, you are missing the gdal python bindings, a "pip install gdal" should<br>
fix it.<br>
<br>
Hope it helps, ciao<br>
<br>
2015-06-07 17:59 GMT+02:00 Vicente <<a href="mailto:deluca.vicente@gmail.com" target="_blank">deluca.vicente@gmail.com</a>>:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Good afternoon,<br>
If I run the following line from my command line, the answer is successful<br>
<br>
$ sudo apt-get -y install libgdal1h libgdal-dev python-gdal<br>
<br>
But if I run from the session virtualenv, the answer is No module named<br>
osgeo.<br>
<br>
I have just added the following session variables in my .bashrc:<br>
export VIRTUALENVWRAPPER_PYTHON = / usr / bin / python<br>
export WORKON_HOME = ~ / .venvs<br>
source /usr/local/bin/virtualenvwrapper.sh<br>
export PIP_DOWNLOAD_CACHE = $ HOME / .pip-downloads<br>
<br>
Both session with virtualenv or outside, the python to run is the same,<br>
Python 2.7.6 (default, Mar 22 2014, 22:59:56)<br>
<br>
The result is that I can not run because there is paver start the osgeo<br>
module from within the session obviously.<br>
<br>
Thanks!<br>
<br>
--<br>
<br>
[image: MANTA] <<a href="http://www.estudiomanta.com/" target="_blank">http://www.estudiomanta.com/</a>><br>
<br>
<br>
<br>
Vicente Deluca<br>
<br>
*<a href="tel:%2B54%2011%206091%204579" value="+541160914579" target="_blank">+54 11 6091 4579</a> <%2B54%2011%206091%204579>*<br>
<br>
<br>
_______________________________________________<br>
geonode-users mailing list<br>
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<a href="http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users" target="_blank">http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users</a><br>
<br>
<br>
</blockquote>
<br>
</blockquote>
<br>
_______________________________________________<br>
geonode-users mailing list<br>
<a href="mailto:geonode-users@lists.osgeo.org" target="_blank">geonode-users@lists.osgeo.org</a><br>
<a href="http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users" target="_blank">http://lists.osgeo.org/cgi-bin/mailman/listinfo/geonode-users</a><br>
</blockquote></div><br></div>