Metacat

Remove individual calls to isAdminAuthorized() in favor of the centralized isAuthorized() call that handles it now.

Incorporate isAdminAuthorized() into isAuthorized() for blanket CN access to objects.

check for null Session before continuing with setReplicationStatus()
https://redmine.dataone.org/issues/2476#note-3

do not attempt to parse empty file for the failure (BaseException serialization). There are cases when this is not given (failure="") when there is not a failure.
https://redmine.dataone.org/issues/2476

check for null session (public) calls to MN.replicate() before passing it to the asynchronous implementation

do not replicate if session is null

throw not authorized when attempting to getReplica as an invalid/non-existent node

transitive properties for mapped subjects:
-group membership
-verified flag
https://redmine.dataone.org/issues/2430
https://redmine.dataone.org/issues/2432

check group membership defined at group level (in addition to membership defined as part of of the Person level)
https://redmine.dataone.org/issues/2429

logging for permission checks - trying to nail down details of MN checking