Project

General

Profile

Bug #7014

Updated by Chris Jones about 8 years ago

When logged in using the `arctic` theme on dev.nceas.ucsb.edu (i.e. via ORCID), the EML download link to the private metadata document that I created fails to download.    We get: 

 <pre> 
 <?xml version="1.0" encoding="UTF-8"?><error detailCode="1400" errorCode="401" name="NotAuthorized"> 
     <description>READ not allowed on arctic-data.11256.1</description> 
 </error> 
 </pre> 
 An example is: 

 https://dev.nceas.ucsb.edu/#view/arctic-data.11256.1 

 The download button links directly to the /object REST endpoint: 

 https://dev.nceas.ucsb.edu/knb/d1/mn/v2/object/arctic-data.11256.1 

 My guess is that the `Authorization` header isn't getting set in this direct call, so with no auth token, it's seen as a public download.

Back