|
Access control has far reaching implications for the services that libraries might wish to operate via Z39.50. There have been debates about
what should be allowed to happen over a Z39.50 session - should libraries download MARC records or not - who has copyright? The Access control built into Z39.50 allows the Z-server (target) to disallow virtually any
operation that might be asked of it by the Z-client (origin). If access control fails, then the Z-Association can either continue with those operations that it is allowed to use or terminate.
An access control “challenge” can be made in respect of individual records if desired. Thus a library might want certain records only to be provided on a paid for basis or, for security reasons, not to be viewed without authorisation.
The format of the messages is defined in the standard or can be agreed separately by libraries and information resources.
|