Permissions: If attempt to access unpublished dv as registered user without perms, get log in page.

[kcondon]

I attempted to paste the url for root dv into the browser when logged in as a user without perms:
https://dvn-build.hmdc.harvard.edu/dataverse.xhtml?id=287

It sent me to the log in page even though the navbar showed that I was still logged in.

[scolapasta]

This is because on build guest still had a role with the "discover" permission. I went ahead and removd that role assignment and it's all set.

[kcondon]

This is not the guest issue, it is a registered user, sending back.

[scolapasta]

Assigning to @eaquigley do decide what the best workflow should be. Right now the logic on dataverse and datset check if you have access and if not send you to login. This is perfect if a guest user, but what should it do if you are registered. Still go here so you can log in as someone else? Or should it go somewhere else, saying you don't have access. (and then what options should it present)

[eaquigley]

instead of taking the user to the log in page, for 4.0, i'd like this to take them to the 404 page.

[mheppler]

Duplicate issue of this was created and closed.

Dataverse/Dataset (Unpublished) - No Access/Permsission Landing Page #1704

Related to 404 issue.

404 Not Found - Browser Gets Forwarded to /404.xhtml #2367

[sekmiller]

To differentiate between a url that yields an object that is not found and one that is found, but the session user does not have permission to view, I have added a 403.xhtml page

[sekmiller]

Added redirect logic for Dataverse and Dataset pages

[kcondon]

OK, works for logged in user without sufficient perms, for user who is not logged in, they go to the log in page. Closing.