1. Integrating Pantheon-Hosted Drupal with the UC Berkeley Research Hub BDUG Monday, February 24, 2014 Room 4, Dwinelle Hall

2. Integrating Pantheon-Hosted Drupal with the UC Berkeley Research Hub Context – Unit / CC program – CC program Web strategies Drupal+Alfresco (UCB Research Hub) – Configuration – Basic use – Option: GUI Alfresco browser – The upshot for CC – Understanding security

3. Connected Corridors Solving California’s Mobility Challenges ~ Connected and Automated Corridor Connected and Automated Vehicles Connected Infrastructure Integrated Corridors Connected Travelers Vehicles, Infrastructure and People

5. Decision Support System for Surface Corridor Mobility Management

6. Pilot Corridor: I-210 6 Extent of Study Area Managed Freeway Supporting Arterials

7. CC Web strategies Public (brochure) sitesite – IST-managed Open Berkeley Pantheon/Drupal

8. CC Web strategies On-line modeling, visualization and decision support applications – Custom apps; not CMS

9. CC Web strategies Documentation site – Locally-managed Pantheon/Drupal

10. Documentation site Program of multiple, related projects Many people generating content Many people (and organizations) consuming content Many formats (Web,.pdf,.docx,.pptx,.tgz…) Lots of updating/versioning Traditional research reports are of low utility for this program and its customers

11. UCB Research Hub (Alfresco) UCB Research Hub (Alfresco)

12. UCB Research Hub (Alfresco) UCB Research Hub (Alfresco)

13. Drupal + Alfresco (Hub) Drupal Alfresco module – https://drupal.org/project/alfresco https://drupal.org/project/alfresco

17. Alfresco module config See security discussion later in presentation

18. Add content  Alfresco item

20. Hub document library item Last part of URL is the identifier for Drupal –workspace://SpacesStore/763833d6-055b-43c5-bbc0-68462f4b903c

23. Two URLs created Drupal node: – http://ccdocs.berkeley.edu/content/i-210- congestion-analysis-2013-01-16pptx http://ccdocs.berkeley.edu/content/i-210- congestion-analysis-2013-01-16pptx Alfresco (Hub) item download link: – http://ccdocs.berkeley.edu/node/54/download/I- 210%20- %20Congestion%20Analysis%20%282013-01- 16%29.pptx http://ccdocs.berkeley.edu/node/54/download/I- 210%20- %20Congestion%20Analysis%20%282013-01- 16%29.pptx

25. Alfresco browser

26. Really not ready for prime time Buggy, slow, unpredictable May work more reliably if you give it free rein Some features give errors When browser module is enabled, the “paste workspace URL” approach is disabled I think I can crash my Pantheon site with it Requires installation of Ext JS libraryExt JS

27. What does this enable for CC? Separates Web presence, file management – Hub for management of rich content creation – Drupal for management of Web presentation Use of Hub’s workflow rules, desktop mount, access permissions Ability to move, rename, version documentLibrary items without breaking links! Public presentation of documents that is… – Brandable – Not overshadowed by the Hub’s many other features (calendars, lists…)

28. Considerations Security; see below Reliance on [Drupal + Pantheon + module + CalNet + Hub] chain A bit clunky to use

31. Security Ian Crew’s writeup of CMIS API security concerns: drupal.org/node/1503108drupal.org/node/1503108

32. Security 1.Stored, authenticated access to Drupal admin's Alfresco account

33. Security 1.Stored, authenticated access to Drupal admin's Alfresco account

34. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site

35. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site

36. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet Guest account assigned to a departmental role e-mail address

37. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet Guest account assigned to a departmental role e-mail address – “Consumer” permissions to Hub site

38. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site – CalNet guest account assigned to a departmental role e-mail address – “Consumer” permissions to Hub site ('alfresco_credentials_username', 's:19:\"connectedcorridors1\";'), ('alfresco_credentials_password', 's:16:\"QzBubmVjdGVkIQ==\";'),

39. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account

40. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account

41. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

42. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

43. Security 1.Stored, authenticated access to Drupal admin's Alfresco account 2.Stored, authenticated access to a special "Drupal site" Alfresco account for each Drupal site 3.Not stored, authenticated access to Drupal user's Alfresco account 4.Unauthenticated, read-only access to Alfresco

44. In this case… Department-owned Hub site – For “public” documents destined for external use CalNet Guest ID – assigned to @path.berkeley.edu department role account – I (individually) am host :/ – “Consumer” privileges to Hub site

45. Thoughts?