Implement discoverability rules for search/browse in 4.0 (permissions)

[eaquigley]

---

Author Name: Philip Durbin (@pdurbin)
Original Redmine Issue: 3464, https://redmine.hmdc.harvard.edu/issues/3464

Original Assignee: Philip Durbin

---

The rules are being finalized here: https://trello.com/c/CkRb3dYl/49-define-search-browse-permissions-discoverability-rules

In previous discussions around Lucene, we started looking at these links to help us implement the rules we want:

• http://www.javaranch.com/journal/2009/02/filtering-a-lucene-search.html
• http://lucene.apache.org/core/3_0_3/api/all/org/apache/lucene/search/Filter.html
• http://lucene.apache.org/core/3_5_0/api/all/org/apache/lucene/search/TermsFilter.html

---

Related issue(s): #341, #380
Redmine related issue(s): 3430, 3756, 3795

---

[eaquigley]

---

Original Redmine Comment
Author Name: Philip Durbin (@pdurbin)
Original Date: 2014-04-28T20:40:05Z

---

The main reason we moved this out of beta is that permissions are not fully implemented. For now, we're looking the creator of dataverse or dataset to decide whether or not it should be discoverable before it has been published. See also #3795 which has a lot of permissions-related code.

The main commit where we starting using the Solr JOIN feature is this one:

some discovery rules for search/browse #3464 · 2505cb7 · IQSS/dataverse - 2505cb7

See also http://lucene.472066.n3.nabble.com/document-level-security-filter-solution-for-Solr-td4126992.html#a4127576

[pdurbin]

Some thinking from https://docs.google.com/spreadsheet/ccc?key=0AvqMYwdHFZghdFNpVDNvcnh4cTZ5amFwdkExcDU1Q1E&usp=sharing

Please note that "Anonymous" also covers "logged in but no explicitly granted read or write access".