Metacat

Meei-ru pointed out that the data file downloads do work but that you get a permission error ("public not allowed") when attempting to download the EML source (qformat=xml) from the page where you are already viewing the EML (styled by skin).

I traced it down to two things:
1. "sessionid" is not included in the EML download link like it is in the data download link.
2. The default skin login form does not seem to correctly set the session cookie. I expected that in lieu of the sessionid parameter, Metacat would look at my browser cookie for the sessionid and use that. This is the case for the admin login screen and for the dev skin login. Looking briefly at the default skin login, it uses the Metacat client to do the authentication call and then manually set the cookie in the browser (at path "/knb/style/skins/default/"). Using the dev skin, the cookie is set at "/knb").