Section 5.4.4 Access Level Convention
The Murdoch Access Level Convention to be practiced in the
preparation of Content includes:
- Determining
the intended audience prior to hosting Content on a Server
- Confirming
that the Server to be used to host or provide access to Content can offer
the appropriate access restriction methods
- Use
of metadata to assign an access level for Content
- Use
of metadata to implement access restriction.
In complying with the Code of Conduct Section 3.2.2 Appropriate Access to Content by End-Users, a Content Custodian,
or in their absence a Web Liaison Officer, or a Content Provider, shall:
- Assign the access level of ‘world’ where there is no need to
restrict access to Content
- Assign an appropriate access level where the Content is of a
personal, sensitive, or confidential nature, or involves a financial
transaction, is intended for a restricted audience, or where the Content that
is copyright material, or subject to a contractual arrangement.
Access Levels
The Access Levels used shall include:
|
No.
|
Level
|
Description
|
|
1
|
World
|
Allow any computer on the Internet to retrieve files via a
Server.
|
|
2
|
|
Allow any computer with an IP address from the range of IP
addresses on the Murdoch University Network that are associated with the
University. Disallow those computers with a Murdoch University Network IP
address where that IP address has been made available to another institution
or organisation under a formal arrangement [ SEE Section 2.2 Boundary of MurdochNet - Network and Communication Services]. When a computer from any IP
address other than the designated range attempts to retrieve a resource with
an access level of ‘murdoch’ that is hosted on a Server using the remote MAIS
libraries, the MAIS login screen should display and prompt the user to enter
a Murdoch Username and Murdoch Password. Current staff and currently enrolled students are able
to login and then retrieve the resource or access the service.
|
|
3
|
Host
|
Allow only computers from a given IP address (or set of IP
addresses) and/or a given hostname (or set of hostnames) to retrieve files
via a Server.
|
|
4
|
MAIS
(Murdoch Authentication and Identification System)
|
Allow only users (staff, students and others) with valid
Murdoch Username and Murdoch Password to authenticate against the MAIS
database. The use of further levels of access restriction is preferred (eg.
individual users, groups and persons assigned to a category of user by means
of a MAIS Authority Type Code).
|
|
5
|
|
Allow only users with a valid username and password to
login to a Server using a database of users maintained on and for that
Server, or accessed by that Server.
|
META Tag Used to Assign an Access Level
The metadata that accompanies Content shall include the use
of:
- The
META tag ‘MU.Access’ to assign an Access Level
The META tag may be embedded in the HTML code or included in
an accompanying configuration file, or held in a metadata repository.
For access levels other than “world”, some method of access
restriction shall be implemented. The methods used for access restriction may
vary across Servers, systems, services and information resources, and may
include use of an approved University-wide authentication system.
[Murdoch University.
Access Restrictions at Murdoch University – Access Restriction Methods
http://www.murdoch.edu.au/cwisad/access/access.html#methods
]
- Section 5.4.4.1: Access Levels and Access Restriction
-
|
