UP Commons internal content now visible to anyone with a KC account #64
Description
We received a communication from Brenna McLaughlin at AUPresses about all users of KC being able to access UP Commons internal sites.
TL;DR
- AUPresses was told that by setting individual sites to "Visible only to registered users of this network" would restrict this content to just AUPresses users
- This was set up in 2019, I do not know how that was set up and if it was special code in the WP codebase or a plugin
- Brenna did a recent test and this no longer works
- Need to determine why it doesn't work and fix it
This is the original email:
When we originally began setting up UP Commons sites; we set our members-only materials on sites that used "Visible only to registered users of this network." And when we set those up (in...2019?), only registered UP Commons users could access the sites and their contents.
However, we just discovered that all of our sites are now open to anyone with a Knowledge Commons account.
How can we fix this? There is an option for "Registered users of this site" but in the mists of time, this made it so people had to jump through another hoop for access to "[subdomain].up.hcommons" sites rather than their UPC account being the single credential they needed for AUPresses Member resources.
When asked about what the original process was she replied with this:
Originally, we were told that "this network" indicated UP Commons, not Humanities Commons as a whole. So that is how we restricted member resources to our members only.
Here is one site that an IHE editor was able to make a KC account and access; then I was able to make a personal KC-only account and replciate that access w/o going through UP Commons. https://acquisitions.up.hcommons.org