10 Authentication, Authorization, Download Tracking

The Cloud Library shall have built-in authentication and authorization using HTTP authorization headers. For unattended downloads of nodesets, authorization validation needs to be additionally supported. Supplied email addresses must be corporate-controlled, and addresses entered must be confirmed before access is granted.

The Cloud Library shall optionally have authorization on a per-nodeset basis, i.e., the nodeset owner can specify who to give access to. Access control can be individuals, organizations, or user types).

The Cloud Library shall optionally have download tracking built-in, which logs the user’s actions.