Collection manager finds identifier for audio/video object for which he/she wants to download master or mezzanine file (managed in Fedora via projection onto HPSS) and makes request for file through locally-developed web application, having authenticated via CAS. Application and/or Fedora are able to authorize download of file based on user's identity, user/group permissions on object, and role/group membership information obtained via LDAP from Active Directory. File (may be as large as 200GB) is downloaded from HPSS to user-designated location.

Example of authorization: Master files from Lilly Library collections may be downloaded by users who have the role of Lilly Library staff. This role is determined based on the user's membership in a LillyStaff group in Active Directory.

a. bottom up: Given an object, list all the parents of all levels

b. top down: For a collection, we would like to know hierarchical structure of the object, even the relationship stored on its children. would like to know how many children of the object and how many grandchildren for each of its children...

c. statistical information for the objects with particular datastream on repository level: for example, we need to know how many items have a PDF file for a particular collection.

A great many example queries that have proved useful in the past are documented here.