Integrating Pantheon-Hosted Drupal with the UC Berkeley Research Hub BDUG Monday, February 24, 2014 Room 4, Dwinelle Hall

Integrating Pantheon-Hosted Drupal with the UC Berkeley Research Hub Context – Unit / CC program – CC program Web strategies Drupal+Alfresco (UCB Research Hub) – Configuration – Basic use – Option: GUI Alfresco browser – The upshot for CC – Understanding security

Connected Corridors Solving California’s Mobility Challenges ~ Connected and Automated Corridor Connected and Automated Vehicles Connected Infrastructure Integrated Corridors Connected Travelers Vehicles, Infrastructure and People

Decision Support System for Surface Corridor Mobility Management

Pilot Corridor: I Extent of Study Area Managed Freeway Supporting Arterials

CC Web strategies Public (brochure) sitesite – IST-managed Open Berkeley Pantheon/Drupal

CC Web strategies On-line modeling, visualization and decision support applications – Custom apps; not CMS

CC Web strategies Documentation site – Locally-managed Pantheon/Drupal

Documentation site Program of multiple, related projects Many people generating content Many people (and organizations) consuming content Many formats (Web,.pdf,.docx,.pptx,.tgz…) Lots of updating/versioning Traditional research reports are of low utility for this program and its customers

UCB Research Hub (Alfresco) UCB Research Hub (Alfresco)

UCB Research Hub (Alfresco) UCB Research Hub (Alfresco)

Drupal + Alfresco (Hub) Drupal Alfresco module –

Alfresco module config See security discussion later in presentation

Add content  Alfresco item

Hub document library item Last part of URL is the identifier for Drupal –workspace://SpacesStore/763833d6-055b-43c5-bbc f4b903c

Two URLs created Drupal node: – congestion-analysis pptx congestion-analysis pptx Alfresco (Hub) item download link: – 210%20- %20Congestion%20Analysis%20% %29.pptx 210%20- %20Congestion%20Analysis%20% %29.pptx

Alfresco browser

Really not ready for prime time Buggy, slow, unpredictable May work more reliably if you give it free rein Some features give errors When browser module is enabled, the “paste workspace URL” approach is disabled I think I can crash my Pantheon site with it Requires installation of Ext JS libraryExt JS

What does this enable for CC? Separates Web presence, file management – Hub for management of rich content creation – Drupal for management of Web presentation Use of Hub’s workflow rules, desktop mount, access permissions Ability to move, rename, version documentLibrary items without breaking links! Public presentation of documents that is… – Brandable – Not overshadowed by the Hub’s many other features (calendars, lists…)

Considerations Security; see below Reliance on [Drupal + Pantheon + module + CalNet + Hub] chain A bit clunky to use

Security Ian Crew’s writeup of CMIS API security concerns: drupal.org/node/ drupal.org/node/

Security 1.Stored, authenticated access to Drupal admin's Alfresco account

Security 1.Stored, authenticated access to Drupal admin's Alfresco account

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet Guest account assigned to a departmental role address

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet Guest account assigned to a departmental role address – “Consumer” permissions to Hub site

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet guest account assigned to a departmental role address – “Consumer” permissions to Hub site ('alfresco_credentials_username', 's:19:\"connectedcorridors1\";'), ('alfresco_credentials_password', 's:16:\"QzBubmVjdGVkIQ==\";'),

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

In this case… Department-owned Hub site – For “public” documents destined for external use CalNet Guest ID – assigned department role account – I (individually) am host :/ – “Consumer” privileges to Hub site

Thoughts?