Implement Access control with Group

[kylehuynh205]

About this PR:

• Implement configurations for the Access control with Group
• Enable private file system and switch default file system to private file system to have all assets be protected with Group
• Switch derivatives actions to private file. (ie. https://islandora.traefik.me/admin/config/system/actions/configure/image_generate_a_service_file_from_an_original_file)
• Add a patch to enable OpenSeadragon View include an JWT token whenever it sends a request to Cantaloupe. (Already had a PR OR new PR )

Required modifications from isle-dc

• Use this PR in isle-dc Access Control for Starter Site isle-dc#349.
• Changes are included:
  • Add extra steps to create a private file system directory.
  • In sample.env, please change:
    • CANTALOUPE_DELEGATE_SCRIPT_ENABLED=true
    • CANTALOUPE_HTTPSOURCE_LOOKUP_STRATEGY=ScriptLookupStrategy
      ==> This can prevent 403 error in OpenSeaDragon Viewer when it views an non-public image for authorized users (even with Admin users).

Modules

Islandora Group Module

• Module Link: https://github.com/digitalutsc/islandora_group
• Based from Danny's initial works, by tagging nodes, then it will move the node and its media into Groups, and Group will handle the access control.
• this module will extend from Danny work to apply access control for node and media separately and provide an UI to move nodes and media to group(s)

Group Solr

• Module Link: https://github.com/digitalutsc/group_solr
• Purpose: prevent restricted node(s) not being included in Search Results and Facet results counter. This ensure the accuracy for the Advanced Search module.
• Components:
  • Provide a Search API processor to check access control of nodes and media with Group when being indexed to Solr.
  • 
  • Provide a filter in Search API Solr based View to check the access control of node when view is loading the results in Search View: https://islandora.traefik.me/admin/structure/views/view/solr_search_content (fixed the issue with search results count in View.
  • 

Private File Adapter

• Module Link: https://github.com/digitalutsc/private_files_adapter
• Implement hook_file_access to check access control in private file when Drupal received the requests from Cantaloupe server.

For ingesting Sample content with Workbench

Requirements:

To ingest node and media with access control with Islandora Workbench:

• After the build completed, visit https://islandora.traefik.me/admin/group and create a new Group.
• In https://islandora.traefik.me/admin/structure/taxonomy/manage/islandora_access/overview, obtain the term ID
• In the Spreadsheet, Add column called field_access_terms, and paste term ID of that Term associated with that newly created Group.
• In Islandora Workbench workbench_utils.py, please add the follwing code after line 3165 and line 3191

                "field_access_terms": [{
                    "target_id": 55,
                    "target_type": 'taxonomy_term'
                }]

Note: Replace 55 with the tid of term associated with newly created Group

Further development

• Currently derivatives are not automatically moved to the group(s) of their parent node.
• Restricted content's thumbnail not loading in Mirador Thumbnail is not loading when media is in Private mode digitalutsc/islandora_mirador#8

[kylehuynh205]

Hi @rosiel, sorry, I made a few messes in the previous PR #98, so I closed it. Please review this PR instead. Thanks.