<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Consolas;
        panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0cm;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        font-size:12.0pt;
        font-family:"Times New Roman",serif;}
pre
        {mso-style-priority:99;
        mso-style-link:"HTML Preformatted Char";
        margin:0cm;
        margin-bottom:.0001pt;
        font-size:10.0pt;
        font-family:"Courier New";}
span.HTMLPreformattedChar
        {mso-style-name:"HTML Preformatted Char";
        mso-style-priority:99;
        mso-style-link:"HTML Preformatted";
        font-family:Consolas;}
span.EmailStyle20
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">One thing that might be worth checking: is the file cached?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">If you:-<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">- downloaded it as a logged-in user<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">- logged out<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">- revisited the URL for the document<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">it would look like you can access it when you shouldn't be able to - as your browser has cached it.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">For PDFs, it can be tricky to force the browser to reload the file - I find the easiest way to do this is to append a query-sting to
the document URL:<br>
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fyour.repo%2F1234%2F1%2Fdocument.pdf&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=XqS099OS6JgXBiaNVR9YZQUVFuhLrSOOYdtMCrhuPtw%3D&reserved=0" originalSrc="https://your.repo/1234/1/document.pdf" shash="SjYLPIM9EBmzwPy6Twps0cer2a0F+LZ2CvL8Q/Yexk/QAohFXkKUon7l4TUKQbBV+9b7zS9CiFYbjA5LD4a5d50Xqr2obdD42IvqVxUIIHsiTEniseTpENWVst2edwiMANyNx/CniguaLjr09WIekDsEbzNJFHDKhi0Qblmdh2Y=">https://your.repo/1234/1/document.pdf</a> ->
<a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fyour.repo%2F1234%2F1%2Fdocument.pdf%3Fa&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=6wQOR%2F7wRkEMqCfUVjfRdT96o46NcWW7Qp2IAfcz2zc%3D&reserved=0" originalSrc="https://your.repo/1234/1/document.pdf?a" shash="gYtyKnoLUt22hlRDLEVcIVYkQmbkGCCw7NmWww+tolBoJOlwCDcV78qE7r330PiRSfvu8QXIDMw1M9yV+K1JLK36qQzzpD+1BSTNkJfsevBSy6XEAHZF1mIRCYNdpuGoipPC33VZhVlK/esY0ij0GiYNnI4yoP07kg3mciG39Bc=">https://your.repo/1234/1/document.pdf?a</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">This doesn't cause EPrints to do anything different, but the browser sees it as a different document and will try to download it again.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Cheers,<br>
John<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> eprints-tech-bounces@ecs.soton.ac.uk [mailto:eprints-tech-bounces@ecs.soton.ac.uk]
<b>On Behalf Of </b>David R Newman via Eprints-tech<br>
<b>Sent:</b> 09 July 2020 09:13<br>
<b>To:</b> eprints-tech@ecs.soton.ac.uk; Ajunk Pracetio <prazetyo@gmail.com><br>
<b>Subject:</b> Re: [EP-tech] Problem with eprints 3.4 file restricted<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Hi Agung Prasetyo W.,<o:p></o:p></p>
<p>Please could you give a bit more detail. Is this 3.4 install a new install or an upgrade from EPrints 3.3? If so you may still have an old cfg/cfg.d/security.pl at the archive level that looks up the IP address in a no longer supported way, which causes
access restriction to break. I can see that you have read the GitHub issue that looks to be relate to a similar issue. So I am guessing you will have already checked this file.<o:p></o:p></p>
<p>I have not seen this issue with any vanilla installs of EPrints 3.4. Is the version of EPrints 3.4 you have installed 3.4.0 or 3.4.1? Is it a zero install or a publication (pub_lib) flavour? If you want to privately send me the link to the publication
that has a downloadable file that should be restricted this may help be get a better idea of what is going wrong.<o:p></o:p></p>
<p>Regards<o:p></o:p></p>
<p>David Newman<o:p></o:p></p>
<div>
<p class="MsoNormal">On 09/07/2020 08:59, Ajunk Pracetio via Eprints-tech wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Why is my eprints 3.4 when my document is restricted to user only, can still be downloaded.<br>
<br>
I have also read <a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints%2Fissues%2F322&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=wCmfL%2B%2FfYJmragAZxr2F5UVq3xIhkNa2%2BPWilUL1UVQ%3D&reserved=0" originalSrc="https://github.com/eprints/eprints/issues/322" shash="AxCpT5QJDuNUMnR9N2Wi3bo6FSFGeSjvCZEUmow7TVW/frgqiZWsxH6UhboFHf1oaxFSQLbf1t9u2OV0rLJvit/HtfoDar31c674HsX5qkuTIVkMhEs5llzRNGaAjqk+Ff8cJDmuhR53Blp6qWrBSW38RPaZWWPak0gd++FYAvo=">
https://github.com/eprints/eprints/issues/322</a> and configured the suggested files, but the files can still be downloaded.<br>
<br>
Please help.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Regards,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Agung Prasetyo W.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>*** Options: <a href="http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech">http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech</a><o:p></o:p></pre>
<pre>*** Archive: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=ndgeCjyvUMeKbNtI0ygghmJKswXH8sTdOf%2BcVyZUHWo%3D&reserved=0" originalSrc="http://www.eprints.org/tech.php/" shash="h0NBccBCQpb0B/6djR2v+QoCU/KlwUpzjD02sftN/iHHSQcxQOit/D4HD+bpiSqiWsArPU9/wKwZaC+aybQaZyjF1LTRnePGznNsUkc89wEYjEJ+uDia3mQcIXTQZuDzrOD6vyM8nktoSpcTuOFTtJsUkZaHdm3soHLBBtEdxEk=">http://www.eprints.org/tech.php/</a><o:p></o:p></pre>
<pre>*** EPrints community wiki: <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=5E5Ybdm1JQMoQLFmGCZewOaOgw390PmBWaSQ7e7tmiA%3D&reserved=0" originalSrc="http://wiki.eprints.org/" shash="VvqywfoRnw8SQt2E57TlTLA/ylAyODzqT/k47xpW12p3tsFx/edaoIMeKpBLSISeGrkUaZQ7Omqpq9vct0yVYFY+strSYLEj2ew+D+f6EUfBg7sGH7z3UabMqXcKUAGCVVaC5Voqo6xaXoeIBCl2ngpAzj6AI6EtetSlsRV5vM8=">http://wiki.eprints.org/</a><o:p></o:p></pre>
</blockquote>
<div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2">
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="1" cellpadding="0" style="border:none;border-top:solid #D3D4DE 1.0pt">
<tbody>
<tr>
<td width="58" style="width:41.25pt;border:none;padding:9.75pt .75pt .75pt .75pt">
<p class="MsoNormal"><a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=liIU%2BJqBzgyjg7xrA57ImSlEWuzvx09BsNpyF8rmgjA%3D&reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="OfXnvQGd4xkAIO/U5mXWIOrqHubcBxRWxerN+/oyCrHJ7wLHs4QDrWY7EYh/sZWoHdJ18CI5ONbZfCi3eN1QV1AeI4k1HSuFx57KbS9yVrh36GFmgFRVE4UadOY/DSL3t/LoNTIr2Uj5fLSCz95y//HeGI1vrMUAnh15Ct8W1NE=" target="_blank"><span style="border:solid windowtext 1.0pt;padding:0cm;text-decoration:none"><img border="0" width="46" height="29" id="_x0000_i1025" src="cid:image001.jpg@01D655D4.86D8EF40" alt="Image removed by sender."></span></a><o:p></o:p></p>
</td>
<td width="473" style="width:352.5pt;border:none;padding:9.0pt .75pt .75pt .75pt">
<p class="MsoNormal" style="line-height:13.5pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#41424E">Virus-free.
<a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.avg.com%2Femail-signature%3Futm_medium%3Demail%26utm_source%3Dlink%26utm_campaign%3Dsig-email%26utm_content%3Demailclient&data=01%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C23e1af2bd96c4933841108d823e34ac0%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=liIU%2BJqBzgyjg7xrA57ImSlEWuzvx09BsNpyF8rmgjA%3D&reserved=0" originalSrc="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient" shash="OfXnvQGd4xkAIO/U5mXWIOrqHubcBxRWxerN+/oyCrHJ7wLHs4QDrWY7EYh/sZWoHdJ18CI5ONbZfCi3eN1QV1AeI4k1HSuFx57KbS9yVrh36GFmgFRVE4UadOY/DSL3t/LoNTIr2Uj5fLSCz95y//HeGI1vrMUAnh15Ct8W1NE=" target="_blank">
<span style="color:#4453EA">www.avg.com</span></a> <o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>