diff --git a/README.md b/README.md
index 8968f1c3a3..5397b5837f 100644
--- a/README.md
+++ b/README.md
@@ -85,7 +85,7 @@ mvn -pl '!clamav-java' verify
 ### Running JavaScript tests
 ```
 # JavaScript Tests
-npm --prefix static/js/admin/vue-permissions-editor run test
+npm --prefix static/js/admin/vue-cdr-admin run test
 npm --prefix static/js/vue-cdr-access run test
 ```
 
diff --git a/auth-api/src/main/java/edu/unc/lib/boxc/auth/api/AccessPrincipalConstants.java b/auth-api/src/main/java/edu/unc/lib/boxc/auth/api/AccessPrincipalConstants.java
index 285d9714be..f73ccc9728 100644
--- a/auth-api/src/main/java/edu/unc/lib/boxc/auth/api/AccessPrincipalConstants.java
+++ b/auth-api/src/main/java/edu/unc/lib/boxc/auth/api/AccessPrincipalConstants.java
@@ -23,6 +23,7 @@ public class AccessPrincipalConstants {
     public final static String PATRON_NAMESPACE = "unc:patron:";
     public final static String IP_PRINC_NAMESPACE = PATRON_NAMESPACE + "ipp:";
     public final static String ADMIN_ACCESS_PRINC = "admin_access";
+    public final static String ON_CAMPUS_PRINC = "unc:patron:ipp:on_campus";
 
     public final static Pattern PATRON_PRINC_PATTERN =
             Pattern.compile("(" + PUBLIC_PRINC
diff --git a/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkRequest.java b/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkRequest.java
index ef17fc35ac..2de499b396 100644
--- a/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkRequest.java
+++ b/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkRequest.java
@@ -1,17 +1,17 @@
 package edu.unc.lib.boxc.operations.impl.download;
 
 import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
 import edu.unc.lib.boxc.auth.api.models.AgentPrincipals;
 import edu.unc.lib.boxc.auth.fcrepo.models.AgentPrincipalsImpl;
 
 public class DownloadBulkRequest {
     private String workPidString;
-    @JsonDeserialize(as = AgentPrincipalsImpl.class)
-    private AgentPrincipals agent;
+    private AccessGroupSet principals;
 
-    public DownloadBulkRequest(String workPidString, AgentPrincipals agent) {
+    public DownloadBulkRequest(String workPidString, AccessGroupSet principals) {
         this.workPidString = workPidString;
-        this.agent = agent;
+        this.principals = principals;
     }
 
     public String getWorkPidString() {
@@ -22,11 +22,11 @@ public void setWorkPidString(String workPidString) {
         this.workPidString = workPidString;
     }
 
-    public AgentPrincipals getAgent() {
-        return agent;
+    public AccessGroupSet getPrincipals() {
+        return principals;
     }
 
-    public void setAgent(AgentPrincipals agent) {
-        this.agent = agent;
+    public void setPrincipals(AccessGroupSet principals) {
+        this.principals = principals;
     }
 }
diff --git a/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkService.java b/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkService.java
index df47e33b32..6ca2491eb1 100644
--- a/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkService.java
+++ b/operations/src/main/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkService.java
@@ -4,7 +4,6 @@
 import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
 import edu.unc.lib.boxc.auth.api.services.AccessControlService;
 import edu.unc.lib.boxc.fcrepo.exceptions.ServiceException;
-import edu.unc.lib.boxc.model.api.exceptions.NotFoundException;
 import edu.unc.lib.boxc.model.api.objects.ContentObject;
 import edu.unc.lib.boxc.model.api.objects.FileObject;
 import edu.unc.lib.boxc.model.api.objects.RepositoryObjectLoader;
@@ -29,11 +28,12 @@ public class DownloadBulkService {
     private AccessControlService aclService;
     private RepositoryObjectLoader repoObjLoader;
     private Path basePath;
+    private int fileLimit;
 
     public Path downloadBulk(DownloadBulkRequest request) {
         var pidString = request.getWorkPidString();
         var workPid = PIDs.get(pidString);
-        var agentPrincipals = request.getAgent().getPrincipals();
+        var agentPrincipals = request.getPrincipals();
         aclService.assertHasAccess(
                 "User does not have permissions to view the Work for download",
                 workPid, agentPrincipals, Permission.viewOriginal);
@@ -61,7 +61,14 @@ private void zipFiles(WorkObject workObject, AccessGroupSet agentPrincipals, Pat
             }
 
             Map<String, Integer> duplicates = new HashMap<>();
+            int count = 0;
             for (ContentObject memberObject : memberObjects ) {
+                if (count == fileLimit) {
+                    break;
+                }
+                if (!(memberObject instanceof FileObject)) {
+                    continue;
+                }
                 var fileObject = (FileObject) memberObject;
                 if (aclService.hasAccess(memberObject.getPid(), agentPrincipals, Permission.viewOriginal)) {
                     var binObj = fileObject.getOriginalFile();
@@ -82,6 +89,7 @@ private void zipFiles(WorkObject workObject, AccessGroupSet agentPrincipals, Pat
 
                         IOUtils.copy(binaryStream, zipOut);
                     }
+                    count++;
                 }
             }
         }
@@ -111,4 +119,8 @@ public void setRepoObjLoader(RepositoryObjectLoader repoObjLoader) {
     public void setBasePath(Path basePath) {
         this.basePath = basePath;
     }
+
+    public void setFileLimit(int fileLimit) {
+        this.fileLimit = fileLimit;
+    }
 }
diff --git a/operations/src/test/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkServiceTest.java b/operations/src/test/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkServiceTest.java
index 23b6a024a0..30a98cf5b4 100644
--- a/operations/src/test/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkServiceTest.java
+++ b/operations/src/test/java/edu/unc/lib/boxc/operations/impl/download/DownloadBulkServiceTest.java
@@ -5,12 +5,12 @@
 import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
 import edu.unc.lib.boxc.auth.api.models.AgentPrincipals;
 import edu.unc.lib.boxc.auth.api.services.AccessControlService;
-import edu.unc.lib.boxc.model.api.exceptions.NotFoundException;
 import edu.unc.lib.boxc.model.api.exceptions.ObjectTypeMismatchException;
 import edu.unc.lib.boxc.model.api.ids.PID;
 import edu.unc.lib.boxc.model.api.objects.BinaryObject;
 import edu.unc.lib.boxc.model.api.objects.FileObject;
 import edu.unc.lib.boxc.model.api.objects.RepositoryObjectLoader;
+import edu.unc.lib.boxc.model.api.objects.Tombstone;
 import edu.unc.lib.boxc.model.api.objects.WorkObject;
 import edu.unc.lib.boxc.model.fcrepo.ids.PIDs;
 import org.apache.commons.io.IOUtils;
@@ -64,6 +64,8 @@ public class DownloadBulkServiceTest {
     private WorkObject parentWork;
     @Mock
     private FileObject fileObject1, fileObject2;
+    @Mock
+    private Tombstone tombstone;
     @TempDir
     public Path zipStorageBasePath;
 
@@ -75,10 +77,11 @@ public void init() throws Exception {
         service.setAclService(aclService);
         service.setRepoObjLoader(repoObjLoader);
         service.setBasePath(zipStorageBasePath);
+        service.setFileLimit(5);
         parentPid = PIDs.get(PARENT_UUID);
         fileObject1Pid = PIDs.get(CHILD1_UUID);
         fileObject2Pid = PIDs.get(CHILD2_UUID);
-        request = new DownloadBulkRequest(PARENT_UUID, mockAgent);
+        request = new DownloadBulkRequest(PARENT_UUID, mockAccessSet);
 
         when(mockAgent.getUsername()).thenReturn("user");
         when(mockAgent.getPrincipals()).thenReturn(mockAccessSet);
@@ -154,6 +157,31 @@ public void noOriginalFilesTest() throws IOException {
         assertZipFiles(List.of(), List.of());
     }
 
+    @Test
+    public void tombstoneTest() throws IOException {
+        when(repoObjLoader.getWorkObject(eq(parentPid))).thenReturn(parentWork);
+        when(parentWork.getMembers()).thenReturn(List.of(tombstone));
+        service.downloadBulk(request);
+        // the zip file should be empty
+        assertZipFiles(List.of(), List.of());
+    }
+
+    @Test
+    public void fileLimitTest() throws IOException {
+        when(repoObjLoader.getWorkObject(any(PID.class))).thenReturn(parentWork);
+        when(parentWork.getMembers()).thenReturn(List.of(fileObject1, fileObject2));
+        makeBinaryObject(fileObject1, FILENAME1);
+        makeBinaryObject(fileObject2, FILENAME2);
+        when(aclService.hasAccess(eq(fileObject1Pid), any(),
+                eq(Permission.viewOriginal))).thenReturn(true);
+        when(aclService.hasAccess(eq(fileObject2Pid), any(),
+                eq(Permission.viewOriginal))).thenReturn(true);
+        service.setFileLimit(1);
+        service.downloadBulk(request);
+        // the zip file should have one entry
+        assertZipFiles(List.of(FILENAME1), List.of("flower"));
+    }
+
     @Test
     public void successTest() throws IOException {
         when(repoObjLoader.getWorkObject(eq(parentPid))).thenReturn(parentWork);
diff --git a/static/css/cdrui_styles.css b/static/css/cdrui_styles.css
index 45ea8cfe65..8498759fdc 100644
--- a/static/css/cdrui_styles.css
+++ b/static/css/cdrui_styles.css
@@ -52,7 +52,6 @@
 .thumbnail {
 	display: block;
 	position:relative;
-	float: left;
 	margin: 0 0 20px 0;
 	text-align: center;
 	object-fit: contain;
diff --git a/static/css/sass/cdr_ui_styles.scss b/static/css/sass/cdr_ui_styles.scss
index f506e79851..61039ad690 100644
--- a/static/css/sass/cdr_ui_styles.scss
+++ b/static/css/sass/cdr_ui_styles.scss
@@ -125,7 +125,7 @@ $box-shadow: inset 3px 3px 10px -1px $box-shadow-color, 0px 16px 22px -15px $box
 *
 **/
 .search-query-text {
-  margin: 40px 20px 40px 25px;
+  margin: 40px 20px 20px 25px;
   font-size: 24px;
 
   h2 {
@@ -147,13 +147,6 @@ form.search {
   }
 }
 
-.browse-search {
-  .button.is-focused,
-  .button:focus {
-    color: #363636;
-  }
-}
-
 a.search-result-num {
   background-color: $container-blue;
   color: white !important;
@@ -420,11 +413,7 @@ p.no-search-results {
 
 #child-files_filter {
   margin-bottom: 25px;
-
-  label {
-    float: right;
-    width: 250px;
-  }
+  margin-top: -50px;
 }
 
 .input::placeholder, .input {
@@ -439,14 +428,19 @@ img.data-thumb {
   max-width: 60px;
 }
 
-.child-records {
-  font-size: 16px;
-  margin: 30px 50px 25px 50px;
+.file-list-header {
+  margin: 30px 0 5px;
 
   h3 {
     font-size: 16px;
-    margin-bottom: 30px;
+    margin: 0;
+    padding: 0;
   }
+}
+
+.child-records {
+  font-size: 16px;
+  overflow: visible;
 
   .fa.default-img-icon {
     font-size: 32px;
@@ -459,14 +453,6 @@ img.data-thumb {
     }
   }
 
-  .is-icon {
-    background-color: $container-blue;
-    border: 1px solid $container-blue;
-    border-radius: 5px;
-    color: white;
-    padding: 7px;
-  }
-
   .no-download {
     background-color: #B8B8B8;
     border-color: #B8B8B8;
@@ -614,7 +600,6 @@ img.data-thumb {
 
 .full_record_top {
   border-bottom: 1px solid $light-gray;
-  padding-bottom: 25px;
 
   .collinfo {
     width: 100%;
@@ -719,7 +704,7 @@ table.dataTable {
   .actionlink {
     a.action {
       font-size: 16px;
-      padding: 15px 15px 30px 15px;
+      padding: 15px;
     }
   }
 }
@@ -729,7 +714,6 @@ table.dataTable {
   .restricted-access {
     border: 1px solid;
     border-radius: 5px;
-    padding: 15px;
 
     .button {
       text-align: left;
@@ -827,11 +811,6 @@ table.dataTable {
   margin-bottom: 10px;
 }
 
-.button.is-focused,
-.button:focus {
-  color: white;
-}
-
 /* MODs display for work and file pages, plus modalMetadata.vue component */
 #mods_data_display {
   margin: auto;
@@ -905,6 +884,21 @@ table.dataTable {
   display: inline-flex;
 }
 
+.button.is-link.is-hovered,
+.button.is-link:hover {
+  background-color: #276cda;
+  border-color: transparent;
+  color: #fff;
+}
+
+.navbar-link.is-active,
+.navbar-link:hover,
+a.navbar-item.is-active,
+a.navbar-item:hover {
+  background-color: #fafafa;
+  color: #3273dc;
+}
+
 /*** End of Bulma overrides ***/
 
 /* Following Bulma breakpoints */
@@ -1042,6 +1036,10 @@ table.dataTable {
     }
   }
 
+  #child-files_filter {
+    margin-top: -25px;
+  }
+
   .dataTables_wrapper {
     .dataTables_filter {
       float: left !important;
@@ -1143,7 +1141,7 @@ iframe {
 
 .clover-viewer {
   margin: auto;
-  width: 90%;
+  width: 95%;
 }
 
 #information-toggle {
diff --git a/static/js/vue-cdr-access/index.html b/static/js/vue-cdr-access/index.html
index 6cdd5eeac7..85d9821af3 100644
--- a/static/js/vue-cdr-access/index.html
+++ b/static/js/vue-cdr-access/index.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bulma/0.7.2/css/bulma.min.css">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@1.0.2/css/versions/bulma-no-dark-mode.min.css">
     <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.5.0/css/all.css">
     <link rel="stylesheet" type="text/css" href="/static/css/cdr_access.css" />
 
diff --git a/static/js/vue-cdr-access/package.json b/static/js/vue-cdr-access/package.json
index 086b4e0304..9de101aadf 100644
--- a/static/js/vue-cdr-access/package.json
+++ b/static/js/vue-cdr-access/package.json
@@ -1,56 +1,59 @@
 {
-  "name": "vue-cdr-access",
-  "version": "0.1.0",
-  "private": true,
-  "scripts": {
-    "dev": "vite",
-    "serve": "vite preview",
-    "build": "vite build",
-    "test": "jest"
-  },
-  "dependencies": {
-    "@samvera/clover-iiif": "^2.10.2",
-    "@vueuse/head": "^2.0.0",
-    "axios": "^1.7.7",
-    "canvas": "^2.11.2",
-    "datatables.net": "^2.1.8",
-    "datatables.net-bm": "^2.1.8",
-    "datatables.net-buttons-bm": "^3.1.2",
-    "datatables.net-vue3": "^3.0.2",
-    "date-fns": "^2.30.0",
-    "date-fns-tz": "^2.0.0",
-    "lodash.chunk": "^4.2.0",
-    "lodash.clonedeep": "^4.5.0",
-    "lodash.debounce": "^4.0.8",
-    "lodash.isempty": "^4.4.0",
-    "lodash.isequal": "^4.5.0",
-    "lodash.range": "^3.2.0",
-    "lodash.sortby": "^4.7.0",
-    "nouislider": "^15.8.1",
-    "pinia": "^2.2.4",
-    "veaury": "^2.5.1",
-    "vue": "^3.5.12",
-    "vue-i18n": "^10.0.4",
-    "vue-router": "^4.4.5"
-  },
-  "devDependencies": {
-    "@babel/plugin-transform-runtime": "^7.25.7",
-    "@babel/preset-env": "^7.25.8",
-    "@intlify/vue-i18n-loader": "^5.0.1",
-    "@pinia/testing": "0.1.6",
-    "@testing-library/jest-dom": "^6.5.0",
-    "@unhead/addons": "^1.8.9",
-    "@vitejs/plugin-vue": "^4.6.2",
-    "@vue/compiler-sfc": "^3.5.12",
-    "@vue/test-utils": "2.4.6",
-    "@vue/vue3-jest": "^29.2.6",
-    "babel-jest": "^29.7.0",
-    "caniuse-lite": "^1.0.30001668",
-    "jest-environment-jsdom": "^29.7.0",
-    "jest-localstorage-mock": "^2.4.26",
-    "moxios": "^0.4.0",
-    "pretty": "^2.0.0",
-    "sass": "^1.69.7",
-    "vite": "4.5.5"
-  }
-}
+    "name": "vue-cdr-access",
+    "version": "0.1.0",
+    "private": true,
+    "scripts":
+    {
+        "dev": "vite",
+        "serve": "vite preview",
+        "build": "vite build",
+        "test": "jest"
+    },
+    "dependencies":
+    {
+        "@samvera/clover-iiif": "^2.10.2",
+        "@vueuse/head": "^2.0.0",
+        "axios": "^1.7.7",
+        "canvas": "^2.11.2",
+        "datatables.net": "^2.1.8",
+        "datatables.net-bm": "^2.1.8",
+        "datatables.net-buttons-bm": "^3.1.2",
+        "datatables.net-vue3": "^3.0.2",
+        "date-fns": "^2.30.0",
+        "date-fns-tz": "^2.0.0",
+        "lodash.chunk": "^4.2.0",
+        "lodash.clonedeep": "^4.5.0",
+        "lodash.debounce": "^4.0.8",
+        "lodash.isempty": "^4.4.0",
+        "lodash.isequal": "^4.5.0",
+        "lodash.range": "^3.2.0",
+        "lodash.sortby": "^4.7.0",
+        "nouislider": "^15.8.1",
+        "pinia": "^2.2.4",
+        "veaury": "^2.5.1",
+        "vue": "^3.5.12",
+        "vue-i18n": "^10.0.4",
+        "vue-router": "^4.4.5"
+    },
+    "devDependencies":
+    {
+        "@babel/plugin-transform-runtime": "^7.25.7",
+        "@babel/preset-env": "^7.25.8",
+        "@intlify/vue-i18n-loader": "^5.0.1",
+        "@pinia/testing": "0.1.6",
+        "@testing-library/jest-dom": "^6.5.0",
+        "@unhead/addons": "^1.8.9",
+        "@vitejs/plugin-vue": "^4.6.2",
+        "@vue/compiler-sfc": "^3.5.12",
+        "@vue/test-utils": "2.4.6",
+        "@vue/vue3-jest": "^29.2.6",
+        "babel-jest": "^29.7.0",
+        "caniuse-lite": "^1.0.30001668",
+        "jest-environment-jsdom": "^29.7.0",
+        "jest-localstorage-mock": "^2.4.26",
+        "moxios": "^0.4.0",
+        "pretty": "^2.0.0",
+        "sass": "^1.69.7",
+        "vite": "4.5.5"
+    }
+}
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/assets/common-styles.css b/static/js/vue-cdr-access/src/assets/common-styles.css
index ddc2c1bf99..5906cf1c01 100644
--- a/static/js/vue-cdr-access/src/assets/common-styles.css
+++ b/static/js/vue-cdr-access/src/assets/common-styles.css
@@ -35,17 +35,13 @@ a.button.is-link span {
     background-color: white;
 }
 
-.image-download-options button {
+.button.is-primary {
     background-color: #1A698C;
     color: white;
-    font-family: 'Open Sans', sans-serif;
-    height: 48px;
 }
 
-.image-download-options button:hover,
-.image-download-options button:focus {
+.button.is-primary:hover {
     background-color: #084b6b;
-    color: white;
 }
 
 .image-download-options a {
diff --git a/static/js/vue-cdr-access/src/components/clearFacetsButton.vue b/static/js/vue-cdr-access/src/components/clearFacetsButton.vue
index da3a775cfb..7f527f1d77 100644
--- a/static/js/vue-cdr-access/src/components/clearFacetsButton.vue
+++ b/static/js/vue-cdr-access/src/components/clearFacetsButton.vue
@@ -2,9 +2,9 @@
 Button for clearing all currently active facets limiting the search.
 -->
 <template>
-    <a v-if="showButton" class="clear-all-facets button is-link is-small" @click.prevent="clearAllFacets()">{{ $t('facets.clear')}}
-        <i class="fas fa-times"></i>
-    </a>
+    <button v-if="showButton" class="clear-all-facets button is-primary" @click.prevent="clearAllFacets()"><span>{{ $t('facets.clear')}}</span>
+        <span class="icon"><i class="fas fa-times"></i></span>
+    </button>
 </template>
 <script>
 import routeUtils from '../mixins/routeUtils';
@@ -27,13 +27,4 @@ export default {
         }
     }
 };
-</script>
-
-<style scoped  lang="scss">
-    a {
-        margin-left: 5px;
-    }
-    i {
-        padding-left: 10px;
-    }
-</style>
\ No newline at end of file
+</script>
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/components/clearFilters.vue b/static/js/vue-cdr-access/src/components/clearFilters.vue
index b999d161f3..d9cd1f1535 100644
--- a/static/js/vue-cdr-access/src/components/clearFilters.vue
+++ b/static/js/vue-cdr-access/src/components/clearFilters.vue
@@ -1,8 +1,10 @@
 <template>
-    <div class="clear-options">
-        <a id="clear-results" class="button is-link is-small" v-bind:class="{ 'disabled' : !this.enableStartOverButton}"
-           href="#" @click.prevent="clearSearch">
-                {{ $t('search.clear_search')}} <i class="fas fa-times"></i></a>
+    <div class="clear-options field is-grouped">
+        <button id="clear-results" class="button is-primary"
+                v-bind:class="{ 'disabled' : !this.enableStartOverButton}"
+                @click.prevent="clearSearch">
+            <span>{{ $t('search.clear_search')}}</span><span class="icon"><i class="fas fa-times"></i></span>
+        </button>
         <clear-facets-button></clear-facets-button>
         <filter-tags :filter-parameters="filterParameters"></filter-tags>
     </div>
@@ -56,14 +58,10 @@ export default {
 </script>
 
 <style scoped  lang="scss">
-    i {
-        padding-left: 10px;
-    }
     .clear-options {
         display: inline-flex;
         flex-wrap: wrap;
-        margin-bottom: 10px;
-        margin-left: 35px;
-        margin-top: -20px
+        margin-bottom: 30px;
+        margin-left: 25px;
     }
 </style>
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/components/filterTags.vue b/static/js/vue-cdr-access/src/components/filterTags.vue
index 6136ba118e..7cb7ec0031 100644
--- a/static/js/vue-cdr-access/src/components/filterTags.vue
+++ b/static/js/vue-cdr-access/src/components/filterTags.vue
@@ -2,18 +2,18 @@
 Displays tags for currently active filters in a search result, with the option to remove them
 -->
 <template>
-    <div>
-        <ul @click="updateQueryUrl">
-            <li data-type="anywhere" class="search-text" v-if="$route.query.anywhere">{{ $route.query.anywhere }}
-                <i class="fas fa-times" data-type="anywhere"></i></li>
-            <template v-for="searchText in searchQueryDisplay">
-                <li :data-type="searchText.type" :data-value="searchText.original_value" class="search-text" :title="searchText.value_text">
+    <div @click="updateQueryUrl" class="field is-grouped">
+        <button data-type="anywhere" class="button search-text" v-if="$route.query.anywhere"><span>{{ $route.query.anywhere }}</span>
+            <span class="icon"><i class="fas fa-times"></i></span></button>
+        <template v-for="searchText in searchQueryDisplay">
+            <button :data-type="searchText.type" :data-value="searchText.original_value" class="search-text button" :title="searchText.value_text">
+                <span>
                     {{ searchText.type_text }} <i class="fas fa-greater-than"></i>
                     {{ truncateText(searchText.value_text) }}
-                    <i class="fas fa-times" :data-type="searchText.type" :data-value="searchText.original_value"></i>
-                </li>
-            </template>
-        </ul>
+                </span>
+                <span class="icon"><i class="fas fa-times"></i></span>
+            </button>
+        </template>
     </div>
 </template>
 
@@ -66,7 +66,13 @@ export default {
         },
 
         _updateParams(event) {
-            const query_param = event.target.getAttribute('data-type');
+            // Find the button that was clicked, to deal with the button containing child elements
+            const button = event.target.closest('button');
+            if (!button) {
+                return;
+            }
+
+            const query_param = button.getAttribute('data-type');
             const params = Object.assign({}, this.$route.query);
             const tag = decodeURIComponent(params[query_param]).split('||');
 
@@ -147,38 +153,12 @@ export default {
 </script>
 
 <style scoped lang="scss">
-    ul {
-        display: flex;
-        flex-wrap: wrap;
-        margin-top: 10px;
-
-        &:hover {
-            cursor: pointer;
-        }
-
-        .search-text {
-            border: 1px solid lightgray;
-            border-radius: 5px;
-            font-size: .85rem;
-            margin-left: 5px;
-            padding-left: 7px;
-            text-indent: 0;
-            text-transform: capitalize;
-        }
-    }
-
-    i.fa-times {
-        background-color: #1A698C;
-        border: 1px solid #1A698C;
-        border-bottom-right-radius: 5px;
-        border-top-right-radius: 5px;
-        color: white;
-        margin-left: 5px;
-        padding: 7px;
-    }
-
     i.fa-greater-than {
-        color: #B0B0B0;
         font-size: .6rem;
     }
+
+    .delete.is-small {
+        margin-left: 6px;
+        margin-right: -5px;
+    }
 </style>
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/components/full_record/adminUnit.vue b/static/js/vue-cdr-access/src/components/full_record/adminUnit.vue
index 318659579e..265a65b5e0 100644
--- a/static/js/vue-cdr-access/src/components/full_record/adminUnit.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/adminUnit.vue
@@ -1,8 +1,10 @@
 <template>
     <div>
         <div class="columns browse-top">
-            <div class="column">
+            <div class="column is-narrow">
                 <thumbnail :thumbnail-data="recordData"></thumbnail>
+            </div>
+            <div class="column">
                 <h2 :class="isDeleted">
                     {{ recordData.briefObject.title }}
                 </h2>
diff --git a/static/js/vue-cdr-access/src/components/full_record/aggregateRecord.vue b/static/js/vue-cdr-access/src/components/full_record/aggregateRecord.vue
index a4f0856119..4380410efd 100644
--- a/static/js/vue-cdr-access/src/components/full_record/aggregateRecord.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/aggregateRecord.vue
@@ -9,6 +9,11 @@
                             <div class="columns is-tablet">
                                 <div class="column is-narrow" :class="isDeleted">
                                     <thumbnail :thumbnail-data="recordData"></thumbnail>
+                                    <div class="actionlink download-jump">
+                                        <a class="button action" :href="filesLink">
+                                            <i class="fa fa-download" aria-hidden="true"></i> Skip to Download
+                                        </a>
+                                    </div>
                                 </div>
                                 <div class="column">
                                     <ul class="record-metadata">
@@ -53,18 +58,27 @@
                             </div>
                         </div>
                     </div>
-                    <restricted-content :record-data="recordData"></restricted-content>
+                    <object-actions :record-data="recordData"></object-actions>
                 </div>
             </div>
         </div>
-        <div class="full_record_bottom">
+        <div class="full_record_bottom container is-fluid">
             <player :record-data="recordData"></player>
-            <file-list v-if="childCount > 0"
-                       :child-count="childCount"
-                       :work-id="recordData.briefObject.id"
-                       :download-access="hasDownloadAccess(recordData)"
-                       :edit-access="hasPermission(recordData,'editDescription')">
-            </file-list>
+            <template v-if="childCount > 0">
+                <div class="file-list-header columns is-vcentered">
+                    <h3 class="column">{{ $t('full_record.item_list') }} ({{ childCount }})</h3>
+                    <bulk-download :has-bulk-download-access="recordData.canBulkDownload"
+                                   :total-download-size="recordData.totalDownloadSize"
+                                   :work-id="recordData.briefObject.id"
+                                   :child-count="childCount">
+                    </bulk-download>
+                </div>
+                <file-list id="file-display"
+                           :work-id="recordData.briefObject.id"
+                           :download-access="hasDownloadAccess(recordData)"
+                           :edit-access="hasPermission(recordData,'editDescription')">
+                </file-list>
+            </template>
             <metadata-display :uuid="recordData.briefObject.id"
                               :can-view-metadata="hasPermission(recordData, 'viewMetadata')">
             </metadata-display>
@@ -84,12 +98,31 @@ import metadataDisplay from '@/components/full_record/metadataDisplay.vue';
 import neighborList from '@/components/full_record/neighborList.vue';
 import objectActions from '@/components/full_record/objectActions.vue';
 import player from '@/components/full_record/player.vue';
+import bulkDownload from "@/components/full_record/bulkDownload.vue";
 
 export default {
     name: 'aggregateRecord',
 
-    components: {abstract, fileList, neighborList, metadataDisplay, objectActions, player},
+    components: {bulkDownload, abstract, fileList, neighborList, metadataDisplay, objectActions, player},
 
     mixins: [fileUtils, fullRecordUtils],
+
+    computed: {
+        filesLink() {
+            const current_page = location.href;
+            return /file-display$/.test(current_page) ? current_page : `${current_page}#file-display`;
+        }
+    }
 }
 </script>
+
+<style scoped lang="scss">
+    .actionlink.download-jump {
+        margin: 0 5px 0 0;
+    }
+
+    .actionlink a.action {
+        font-size: 1rem;
+        padding: 10px;
+    }
+</style>
diff --git a/static/js/vue-cdr-access/src/components/full_record/bulkDownload.vue b/static/js/vue-cdr-access/src/components/full_record/bulkDownload.vue
new file mode 100644
index 0000000000..09181914c4
--- /dev/null
+++ b/static/js/vue-cdr-access/src/components/full_record/bulkDownload.vue
@@ -0,0 +1,78 @@
+<template>
+    <div v-if="hasDownloadableContent" class="column pr-0 has-text-right">
+        <a v-if="showTotalFilesize"
+           class="bulk-download bulk-download-link button action is-primary"
+           :href="downloadBulkUrl(workId)"
+           @click.prevent="handleDownload">
+            <span class="icon">
+                <i class="fa fa-archive"></i>
+            </span>
+            <span>{{ $t('full_record.bulk_download') }} ({{ formatFilesize(totalDownloadSize) }})</span>
+        </a>
+        <a v-else class="bulk-download bulk-download-email button action" href="https://library.unc.edu/contact-us/?destination=wilson">
+            <span class="icon">
+                <i class="fa fa-envelope"></i>
+            </span>
+            <span>{{ $t('access.contact') }}</span>
+        </a>
+    </div>
+</template>
+
+<script>
+import fileUtils from '../../mixins/fileUtils';
+import fullRecordUtils from '../../mixins/fullRecordUtils';
+
+const ONE_GIGABYTE = 1073741824;
+
+export default {
+    name: 'bulkDownload',
+
+    mixins: [fileUtils, fullRecordUtils],
+
+    props: {
+        totalDownloadSize: {
+            default: null,
+            type: Number
+        },
+        hasBulkDownloadAccess: {
+            default: false,
+            type: Boolean
+        },
+        childCount: {
+            default: null,
+            type: Number
+        },
+        workId: String
+    },
+
+    computed: {
+        hasTooManyChildren() {
+            // Based off of the limit set in DownloadBulkService
+            return this.childCount > 100;
+        },
+
+        hasDownloadableContent() {
+            return this.hasBulkDownloadAccess && this.totalDownloadSize !== null;
+        },
+
+        showTotalFilesize() {
+            return this.hasBulkDownloadAccess && this.totalDownloadSize <= ONE_GIGABYTE;
+        }
+    },
+
+    methods: {
+        handleDownload(event) {
+            if (this.hasTooManyChildren) {
+                // Prevent navigation if user cancels
+                if (!confirm("Number of files exceeds the download limit, only the first 100 will be exported. Do you want to continue?")) {
+                    return;
+                }
+            }
+
+            // Trigger the download
+            const link = event.target.closest('a');
+            window.location.href = link.href;
+        }
+    }
+}
+</script>
diff --git a/static/js/vue-cdr-access/src/components/full_record/collectionRecord.vue b/static/js/vue-cdr-access/src/components/full_record/collectionRecord.vue
index c78b0a2e13..07ef592d37 100644
--- a/static/js/vue-cdr-access/src/components/full_record/collectionRecord.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/collectionRecord.vue
@@ -1,8 +1,10 @@
 <template>
     <div class="content-wrap full_record">
         <div class="columns browse-top">
-            <div class="column" :class="{restrictedContent: 'is-8'}">
+            <div class="column is-narrow" :class="{restrictedContent: 'is-8'}">
                 <thumbnail :thumbnail-data="recordData"></thumbnail>
+            </div>
+            <div class="column">
                 <h2 :class="isDeleted">
                     {{ recordData.briefObject.title }}
                     <span class="item_container_count">{{ displayChildCount }}</span>
diff --git a/static/js/vue-cdr-access/src/components/full_record/downloadOptions.vue b/static/js/vue-cdr-access/src/components/full_record/downloadOptions.vue
index 3a839f837b..1357db91e1 100644
--- a/static/js/vue-cdr-access/src/components/full_record/downloadOptions.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/downloadOptions.vue
@@ -1,20 +1,18 @@
 <template>
-    <div v-if="!isLoggedIn && restrictedFiles(recordData) && hasGroupRole(recordData, 'canViewOriginals', 'authenticated')" class="actionlink download">
-        <a @click.prevent="modal_open = true" class="download login-modal-link button action" href="#">{{ t('full_record.login') }}</a>
+    <div v-if="!isLoggedIn && restrictedFiles(recordData) && hasGroupRole(recordData, 'canViewOriginals', 'authenticated')" class="download">
+        <a @click.prevent="modal_open = true" class="download login-modal-link button action is-primary" href="#">{{ t('full_record.login') }}</a>
     </div>
     <div v-else-if="!isLoggedIn && restrictedFiles(recordData)" class="download">
-        <div class="actionlink">
-            <a class="button contact action" href="https://library.unc.edu/contact-us/?destination=wilson"><i class="fa fa-envelope"></i> {{ t('access.contact') }}</a>
-        </div>
+        <a class="button contact action is-primary" href="https://library.unc.edu/contact-us/?destination=wilson"><span class="icon"><i class="fa fa-envelope"></i></span><span>{{ t('access.contact') }}</span></a>
     </div>
-    <div v-else-if="showNonImageDownload(recordData)" class="actionlink download">
-        <a class="download button action" :href="nonImageDownloadLink(recordData.id)"><i class="fa fa-download"></i> {{ t('full_record.download') }}</a>
+    <div v-else-if="showNonImageDownload(recordData)" class="download">
+        <a class="download button action is-primary" :href="nonImageDownloadLink(recordData.id)"><span class="icon"><i class="fa fa-download"></i></span><span>{{ t('full_record.download') }}</span></a>
     </div>
-    <div v-else-if="showImageDownload(recordData) && hasDownloadOptions(recordData)" class="dropdown actionlink download image-download-options">
+    <div v-else-if="showImageDownload(recordData) && hasDownloadOptions(recordData)" class="dropdown download image-download-options">
         <div class="dropdown download image-download-options">
             <div class="dropdown-trigger">
-                <button @click="toggleDownloadOptions()" id="dropdown-menu-button" class="button download-images" aria-haspopup="true" aria-controls="dropdown-menu">
-                    {{ t('full_record.download') }} <i class="fas fa-angle-down" aria-hidden="true"></i>
+                <button @click="toggleDownloadOptions()" id="dropdown-menu-button" class="button download-images is-primary" aria-haspopup="true" aria-controls="dropdown-menu">
+                    <span>{{ t('full_record.download') }}</span><span class="icon"><i class="fas fa-angle-down" aria-hidden="true"></i></span>
                 </button>
             </div>
             <div class="dropdown-menu table-downloads" :class="{ 'show-list': download_options_open }" id="dropdown-menu" role="menu" :aria-hidden="!download_options_open">
@@ -32,9 +30,7 @@
         </div>
     </div>
     <div v-else-if="showImageDownload(recordData) && !hasDownloadOptions(recordData)" class="download">
-        <div class="actionlink">
-            <a class="button contact action" href="https://library.unc.edu/contact-us/?destination=wilson"><i class="fa fa-envelope"></i> {{ t('access.contact') }}</a>
-        </div>
+        <a class="button is-primary contact action" href="https://library.unc.edu/contact-us/?destination=wilson"><span class="icon"><i class="fa fa-envelope"></i></span><span>{{ t('access.contact') }}</span></a>
     </div>
 
     <div v-if="!isLoggedIn && restrictedFiles(recordData) && hasGroupRole(recordData, 'canViewOriginals', 'authenticated')" class="modal" :class="{ 'is-active': modal_open }">
@@ -45,13 +41,9 @@
                 <button @click="modal_open = false" class="delete close" aria-label="close"></button>
             </header>
             <section class="modal-card-body">
-                <div class="restricted-access downloads">
-                    <div v-if="hasGroupRole(recordData, 'canViewOriginals', 'authenticated')" class="actionlink">
-                        <a class="button login-link action" :href="loginUrl"><i class="fa fa-id-card"></i> {{ t('access.login') }}</a>
-                    </div>
-                    <div class="actionlink">
-                        <a class="button contact action" href="https://library.unc.edu/contact-us/?destination=wilson"><i class="fa fa-envelope"></i> {{ t('access.contact') }}</a>
-                    </div>
+                <div class="restricted-access downloads field is-grouped is-grouped-centered is-grouped-multiline py-4">
+                    <a v-if="hasGroupRole(recordData, 'canViewOriginals', 'authenticated')" class="button login-link action is-primary" :href="loginUrl"><span class="icon"><i class="fa fa-id-card"></i></span><span>{{ t('access.login') }}</span></a>
+                    <a class="button contact action is-primary" href="https://library.unc.edu/contact-us/?destination=wilson"><span class="icon"><i class="fa fa-envelope"></i></span><span>{{ t('access.contact') }}</span></a>
                 </div>
             </section>
         </div>
@@ -90,19 +82,11 @@ export default {
 
     methods: {
         restrictedFiles(recordData) {
-            if (!this.hasGroups(recordData) ||
-                recordData.groupRoleMap.everyone === undefined) {
-                return false;
-            }
-            if (recordData.groupRoleMap.everyone.includes('canViewOriginals')) {
-                return false;
+            // For files, need to check if there are download options
+            if (!this.restrictedContent && recordData.type === 'File') {
+                return !this.hasDownloadOptions(recordData);
             }
-            // For File objects, content is not restricted if the user can at least download low res files
-            // Record is assumed to be a file
-            if (recordData.type === 'File' && this.hasDownloadAccess(recordData) && this.hasDownloadOptions(recordData)) {
-                return false;
-            }
-            return true;
+            return this.restrictedContent;
         },
 
         toggleDownloadOptions() {
@@ -164,6 +148,9 @@ export default {
         },
 
         getImageDimensions(image_metadata) {
+            if (!image_metadata) {
+                return '0x0';
+            }
             const image_dimensions = image_metadata.split('|');
             return image_dimensions[image_dimensions.length - 1];
         },
@@ -180,8 +167,8 @@ export default {
 
         showImageDownload(brief_object) {
             return this.hasPermission(brief_object, 'viewReducedResImages') &&
-                brief_object.format.includes('Image') && this.getOriginalFile(brief_object) !== undefined &&
-                this.hasJp2File(brief_object);
+                brief_object.format !== undefined && brief_object.format.includes('Image') &&
+                this.getOriginalFile(brief_object) !== undefined && this.hasJp2File(brief_object);
         },
 
         hasJp2File(brief_object) {
@@ -231,62 +218,13 @@ export default {
         text-align: center;
     }
 
-    .modal-card {
-        border-radius: 5px;
-
-        .modal-card-head {
-            align-items: flex-start;
-        }
-
-        .button {
-            display: flex;
-            font-size: 1rem !important;
-            padding: 0 10px !important;
-            height: 2rem;
-        }
-    }
-
-    .actionlink .contact i,
-    .restricted-access .actionlink i {
-        padding-right: 8px;
-    }
-
-    .restricted-access {
-        display: flex;
-        justify-content: center;
-
-        .actionlink {
-            display: flex;
-            flex-wrap: wrap;
-            margin: auto;
-            width: fit-content;
-
-            &:last-of-type {
-                margin-left: 15px;
-            }
-        }
+    .dropdown-trigger span, .dropdown-trigger i {
+        pointer-events: none;
     }
 
-    @media screen and (max-width: 576px) {
-        .modal-card-body {
-            .restricted-access {
-                flex-direction: column;
-                align-items: center;
-
-                .actionlink + .actionlink {
-                    margin-left: 0;
-                    margin-right: 0;
-                    margin-top: 8px;
-                }
-            }
-        }
-
-        .item-actions {
-            .image-download-options {
-                .image-download-options .dropdown-menu {
-                    left: 0;
-                }
-            }
+    @media screen and (min-width: 769px) {
+        .modal-card {
+            width: 680px;
         }
     }
 </style>
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/components/full_record/fileList.vue b/static/js/vue-cdr-access/src/components/full_record/fileList.vue
index 7f1ce646e1..5adfaaf3d5 100644
--- a/static/js/vue-cdr-access/src/components/full_record/fileList.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/fileList.vue
@@ -7,7 +7,6 @@ force it to reload
 -->
 <template>
     <div class="child-records table-container" id="data-display">
-        <h3>{{ $t('full_record.item_list') }} ({{ childCount }})</h3>
         <data-table :key="workId" id="child-files" class="table is-striped is-bordered is-fullwidth"
                     :ajax="ajaxOptions"
                     :columns="columns"
@@ -40,6 +39,7 @@ import DataTable from 'datatables.net-vue3'
 import DataTablesLib from 'datatables.net-bm';
 import 'datatables.net-buttons-bm';
 
+
 DataTable.use(DataTablesLib);
 
 export default {
@@ -50,7 +50,6 @@ export default {
     components: {DownloadOptions, DataTable},
 
     props: {
-        childCount: Number,
         downloadAccess: {
             default: false,
             type: Boolean
@@ -215,8 +214,8 @@ export default {
                 column_defs.push(
                     {
                         render: (data, type, row) => {
-                            return `<a href="/admin/describe/${row.id}" aria-label="${this.ariaLabelText(row)}">` +
-                                '<i class="fa fa-edit is-icon" title="Edit"></i></a>'
+                            return `<a href="/admin/describe/${row.id}" class="button action is-primary" aria-label="${this.ariaLabelText(row)}">` +
+                                '<span class="icon"><i class="fa fa-edit" title="Edit"></span></i></a>'
                         },
                         targets: column_number
                     }
@@ -254,7 +253,6 @@ export default {
         }
 
         input[type=search] {
-            margin-bottom: 15px;
             min-width: 225px;
         }
 
@@ -285,6 +283,10 @@ export default {
             }
         }
 
+        a {
+            word-break: break-word;
+        }
+
         tr.deleted {
             a.dropdown-item {
                 color: black
@@ -294,6 +296,7 @@ export default {
         .actionlink {
             a.action {
                 display: flex;
+                height: 34px;
             }
 
             a.dropdown-item {
@@ -332,4 +335,20 @@ export default {
     .show-list {
         display: block;
     }
+
+    @media screen and (max-width: 576px) {
+        #data-display {
+            .actionlink.column {
+                margin-bottom: 0;
+            }
+
+            .dataTables_filter {
+                margin-top: -25px
+            }
+
+            .child-files_wrapper {
+                margin-left: 0;
+            }
+        }
+    }
 </style>
\ No newline at end of file
diff --git a/static/js/vue-cdr-access/src/components/full_record/folderRecord.vue b/static/js/vue-cdr-access/src/components/full_record/folderRecord.vue
index 7dc29d663e..7d99f13285 100644
--- a/static/js/vue-cdr-access/src/components/full_record/folderRecord.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/folderRecord.vue
@@ -1,8 +1,10 @@
 <template>
     <div class="content-wrap full_record">
         <div class="columns browse-top">
-            <div class="column" :class="{restrictedContent: 'is-8'}">
+            <div class="column is-narrow">
                 <thumbnail :thumbnail-data="recordData"></thumbnail>
+            </div>
+            <div class="column">
                 <h2 :class="isDeleted">
                     {{ recordData.briefObject.title }}
                     <span class="item_container_count">{{ displayChildCount }}</span>
diff --git a/static/js/vue-cdr-access/src/components/full_record/objectActions.vue b/static/js/vue-cdr-access/src/components/full_record/objectActions.vue
index 7fba7d6667..679f154472 100644
--- a/static/js/vue-cdr-access/src/components/full_record/objectActions.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/objectActions.vue
@@ -1,34 +1,24 @@
 <template>
     <div class="column is-narrow action-btn item-actions">
-        <div v-if="hasPermission(recordData, 'editDescription')" class="actionlink">
-            <a class="edit button action" :href="editDescriptionUrl(recordData.briefObject.id)"><i class="fa fa-edit"></i> {{ $t('full_record.edit') }}</a>
-        </div>
-        <template v-if="recordData.resourceType === 'File'">
-            <div v-if="restrictedContent && !isLoggedIn" class="column is-narrow item-actions">
-                <div class="restricted-access actions">
-                    <h2 class="has-text-centered">{{ $t('full_record.restricted_content', { resource_type: recordData.briefObject.type.toLowerCase() }) }}</h2>
+        <template v-if="recordData.resourceType !== 'Work'">
+            <div v-if="restrictedContent && !isLoggedIn" class="column is-narrow item-actions has-text-centered">
+                <div class="restricted-access p-4">
+                    <h2>{{ $t('full_record.restricted_content', { resource_type: recordData.briefObject.type.toLowerCase() }) }}</h2>
                     <download-options :record-data="recordData.briefObject" :t="$t"></download-options>
                 </div>
             </div>
-            <template v-else>
+            <div v-else class="field is-grouped is-justify-content-right">
                 <download-options :record-data="recordData.briefObject" :t="$t"></download-options>
-                <div class="actionlink" v-if="hasPermission(recordData, 'viewOriginal')">
-                    <a class="button view action" :href="recordData.dataFileUrl">
-                        <i class="fa fa-search" aria-hidden="true"></i> View</a>
-                </div>
-            </template>
-            <template v-if="hasPermission(recordData, 'viewHidden')">
-                <single-use-link :uuid="recordData.briefObject.id"></single-use-link>
-            </template>
-        </template>
-        <template v-if="recordData.resourceType === 'Folder' || recordData.resourceType === 'Collection'">
-            <div v-if="restrictedContent && !isLoggedIn" class="column is-narrow item-actions">
-                <div class="restricted-access actions">
-                    <h2 class="has-text-centered">{{ $t('full_record.restricted_content', { resource_type: recordData.briefObject.type.toLowerCase() }) }}</h2>
-                    <download-options :record-data="recordData.briefObject" :t="$t"></download-options>
-                </div>
+                <a class="button view action" :href="recordData.dataFileUrl" v-if="recordData.resourceType === 'File' && hasPermission(recordData, 'viewOriginal')">
+                    <i class="fa fa-search" aria-hidden="true"></i> View</a>
             </div>
         </template>
+        <div v-if="hasPermission(recordData, 'editDescription')" class="field is-grouped is-justify-content-right">
+            <a class="edit button action is-primary" :href="editDescriptionUrl(recordData.briefObject.id)"><span class="icon"><i class="fa fa-edit"></i></span><span>{{ $t('full_record.edit') }}</span></a>
+        </div>
+        <div v-if="recordData.resourceType === 'File' && hasPermission(recordData, 'viewHidden')" class="is-justify-content-right">
+            <single-use-link :uuid="recordData.briefObject.id"></single-use-link>
+        </div>
     </div>
 </template>
 
@@ -62,13 +52,6 @@ export default {
  }
 
  @media (max-width: 768px) {
-     .actionlink {
-         text-align: left;
-         margin: auto;
-         justify-content: left;
-         width: 99%;
-     }
-
      .action-btn {
          padding-right: 0;
      }
diff --git a/static/js/vue-cdr-access/src/components/full_record/singleUseLink.vue b/static/js/vue-cdr-access/src/components/full_record/singleUseLink.vue
index 7385c987ee..7552419c41 100644
--- a/static/js/vue-cdr-access/src/components/full_record/singleUseLink.vue
+++ b/static/js/vue-cdr-access/src/components/full_record/singleUseLink.vue
@@ -1,10 +1,10 @@
 <template>
     <div class="header-button-single-download">
-        <div class="actionlink single-download">
+        <div class="single-download">
             <div class="single-use-msg-text" :class="{'display-msg': this.message !== ''}">
                 {{ this.message }}
             </div>
-            <a class="button action" id="single-use-link" href="#" @click.prevent="createLink()">{{ $t('full_record.download_single_use') }}</a>
+            <a class="button action is-primary" id="single-use-link" href="#" @click.prevent="createLink()">{{ $t('full_record.download_single_use') }}</a>
             <ul>
                 <li v-for="single_use_link in single_use_links">
                     <div class="download-link-wrapper">
diff --git a/static/js/vue-cdr-access/src/mixins/fullRecordUtils.js b/static/js/vue-cdr-access/src/mixins/fullRecordUtils.js
index 3c77271f0b..7034fcf8b5 100644
--- a/static/js/vue-cdr-access/src/mixins/fullRecordUtils.js
+++ b/static/js/vue-cdr-access/src/mixins/fullRecordUtils.js
@@ -46,15 +46,15 @@ export default {
         },
 
         restrictedContent() {
-            if (!this.hasGroups(this.recordData) ||
-                this.recordData.briefObject.groupRoleMap.everyone === undefined) {
+            let record = this.recordData.briefObject === undefined ? this.recordData : this.recordData.briefObject;
+            if (!this.hasGroups(record) || record.groupRoleMap.everyone === undefined) {
                 return false;
             }
-            if (this.recordData.briefObject.groupRoleMap.everyone.includes('canViewOriginals')) {
+            if (record.groupRoleMap.everyone.includes('canViewOriginals')) {
                 return false;
             }
             // For File objects, content is not restricted if the user can at least download low res files
-            if (this.recordData.resourceType === 'File' && this.hasDownloadAccess(this.recordData)) {
+            if (record.resourceType === 'File' && this.hasDownloadAccess(record)) {
                 return false;
             }
             return true;
@@ -95,6 +95,10 @@ export default {
             return `https://${window.location.host}/admin/describe/${id}`;
         },
 
+        downloadBulkUrl(id) {
+            return `https://${window.location.host}/services/api/bulkDownload/${id}`;
+        },
+
         hasMoreExhibits(current_exhibit, exhibits) {
             return current_exhibit < Object.keys(exhibits).length - 1;
         }
diff --git a/static/js/vue-cdr-access/src/translations.js b/static/js/vue-cdr-access/src/translations.js
index b430b2eed6..bc434b500f 100644
--- a/static/js/vue-cdr-access/src/translations.js
+++ b/static/js/vue-cdr-access/src/translations.js
@@ -40,6 +40,7 @@ export default {
         full_record: {
             additional_metadata: "View Additional Metadata",
             available_date: "Available after {available_date}",
+            bulk_download: "Download All Files",
             collection: "Collection",
             contains: "Contains",
             copied_link: "Download URL, {text}, copied to clipboard",
diff --git a/static/js/vue-cdr-access/tests/unit/aggregateRecord.spec.js b/static/js/vue-cdr-access/tests/unit/aggregateRecord.spec.js
index 0bd10798d5..97d6075aeb 100644
--- a/static/js/vue-cdr-access/tests/unit/aggregateRecord.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/aggregateRecord.spec.js
@@ -178,7 +178,6 @@ const record = {
                     title: "fc77a9be-b49d-4f4e-b656-1644c9e964fc"
                 }
             ],
-            _version_: 1760531096505680000,
             permissions: [
                 "markForDeletionUnit",
                 "move",
@@ -283,7 +282,6 @@ const record = {
                     title: "fc77a9be-b49d-4f4e-b656-1644c9e964fc"
                 }
             ],
-            _version_: 1760531096497291300,
             permissions: [
                 "markForDeletionUnit",
                 "move",
@@ -583,6 +581,14 @@ describe('aggregateRecord.vue', () => {
         expect(wrapper.find('h2').text()).toEqual('Listen for real');
     });
 
+    it("has a jump to download button", () => {
+        expect(wrapper.find('.download-jump a').exists()).toBe(true);
+    });
+
+    it("displays a header with file count", () => {
+        expect(wrapper.find('h3').text()).toEqual("List of Items in This Work (1)");
+    });
+
     it("does not display a finding aid link, if absent", () => {
         expect(wrapper.find('.finding-aid').exists()).toBe(false);
     });
diff --git a/static/js/vue-cdr-access/tests/unit/bulkDownload.spec.js b/static/js/vue-cdr-access/tests/unit/bulkDownload.spec.js
new file mode 100644
index 0000000000..f6e895bb33
--- /dev/null
+++ b/static/js/vue-cdr-access/tests/unit/bulkDownload.spec.js
@@ -0,0 +1,117 @@
+import {shallowMount} from '@vue/test-utils'
+import bulkDownload from '@/components/full_record/bulkDownload.vue';
+import {createI18n} from 'vue-i18n';
+import translations from '@/translations';
+
+const work_id = 'e2f0d544-4f36-482c-b0ca-ba11f1251c01'
+let wrapper;
+
+describe('bulkDownload.vue', () => {
+    const i18n = createI18n({
+        locale: 'en',
+        fallbackLocale: 'en',
+        messages: translations
+    });
+
+    beforeEach(() => {
+        wrapper = shallowMount(bulkDownload, {
+            global: {
+                plugins: [i18n],
+            },
+            props: {
+                totalDownloadSize: 8193,
+                hasBulkDownloadAccess: true,
+                workId: work_id,
+                childCount: 5
+            }
+        });
+    });
+
+    it ("displays a bulk download button for downloads less than 1 GB", () => {
+        let download_link = wrapper.find('.bulk-download-link');
+        let download_email = wrapper.find('.bulk-download-email');
+
+        expect(download_link.exists()).toBe(true);
+        expect(download_email.exists()).toBe(false);
+        expect(download_link.attributes('href')).toEqual(expect.stringContaining(`/services/api/bulkDownload/${work_id}`));
+        expect(download_link.text()).toEqual(expect.stringContaining('Download All Files (8 KB)'));
+    });
+
+    it ("displays a contact wilson button for downloads greater than 1 GB", async () => {
+        const TWO_GIGABYTE_FILE = 2147483648;
+        await wrapper.setProps({
+            totalDownloadSize: TWO_GIGABYTE_FILE
+        });
+
+        let download_link = wrapper.find('.bulk-download-link');
+        let download_email = wrapper.find('.bulk-download-email');
+
+        expect(download_link.exists()).toBe(false);
+        expect(download_email.exists()).toBe(true);
+        expect(download_email.attributes('href')).toEqual('https://library.unc.edu/contact-us/?destination=wilson');
+        expect(download_email.text()).toEqual(expect.stringContaining('Contact Wilson Library for access'));
+    });
+
+    it ("does not display a button if the user doesn't have hasBulkDownloadAccess", async () => {
+        await wrapper.setProps({
+            hasBulkDownloadAccess: false
+        });
+
+        let download_link = wrapper.find('.actionlink');
+        expect(download_link.exists()).toBe(false);
+    });
+
+    it ("does not display a button if the download size is not set", async () => {
+        await wrapper.setProps({
+            totalDownloadSize: null
+        });
+
+        let download_link = wrapper.find('.actionlink');
+        expect(download_link.exists()).toBe(false);
+    });
+
+    it ("prompts user for confirmation if there are more than 100 files", async () => {
+        // Mock window.confirm
+        const confirmMock = jest.spyOn(window, 'confirm');
+
+        // Mock return values for confirm
+        confirmMock.mockImplementationOnce(() => false); // Simulate "No" click
+        confirmMock.mockImplementationOnce(() => true);  // Simulate "Yes" click
+
+        // Mock navigation
+        const locationMock = jest.spyOn(window, 'location', 'get');
+        const mockLocation = { href: '' };
+        locationMock.mockReturnValue(mockLocation);
+
+        await wrapper.setProps({
+            childCount: 200
+        });
+
+        let download_link = wrapper.find('.bulk-download-link');
+        let download_email = wrapper.find('.bulk-download-email');
+
+        expect(download_link.exists()).toBe(true);
+        expect(download_email.exists()).toBe(false);
+        expect(download_link.attributes('href')).toEqual(expect.stringContaining(`/services/api/bulkDownload/${work_id}`));
+        expect(download_link.text()).toEqual(expect.stringContaining('Download All Files (8 KB)'));
+
+        // Trigger the click (simulating user action)
+        await download_link.trigger('click');
+        expect(window.confirm).toHaveBeenCalledWith(
+            "Number of files exceeds the download limit, only the first 100 will be exported. Do you want to continue?"
+        );
+
+        // Verify that "No" prevents navigation
+        expect(mockLocation.href).toBe('');
+
+        // Simulate another click with "Yes"
+        await download_link.trigger('click');
+        expect(window.confirm).toBeCalledTimes(2);
+        // Download should occur this time
+        expect(mockLocation.href).toContain(`/services/api/bulkDownload/${work_id}`);
+
+        // Cleanup mocks
+        confirmMock.mockRestore();
+        locationMock.mockRestore();
+    });
+});
diff --git a/static/js/vue-cdr-access/tests/unit/clearFilters.spec.js b/static/js/vue-cdr-access/tests/unit/clearFilters.spec.js
index 72a7894e4e..abb657742e 100644
--- a/static/js/vue-cdr-access/tests/unit/clearFilters.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/clearFilters.spec.js
@@ -56,7 +56,7 @@ describe('clearFilters.vue', () => {
         expect(wrapper.vm.$router.currentRoute.value.query.anywhere).toEqual("test");
         expect(wrapper.vm.$router.currentRoute.value.query.subject).toEqual("topic");
 
-        let clearLink = wrapper.find('a#clear-results');
+        let clearLink = wrapper.find('#clear-results');
         expect(clearLink.classes()).not.toContain('disabled');
 
         await clearLink.trigger('click');
@@ -70,7 +70,7 @@ describe('clearFilters.vue', () => {
         await flushPromises();
         expect(wrapper.vm.$router.currentRoute.value.query.anywhere).toEqual('TestCollection');
 
-        let clearLink = wrapper.find('a#clear-results');
+        let clearLink = wrapper.find('#clear-results');
         await clearLink.trigger('click');
         await flushPromises();
         expect(wrapper.vm.$router.currentRoute.value.query.anywhere).not.toBeDefined();
diff --git a/static/js/vue-cdr-access/tests/unit/displayWrapper.spec.js b/static/js/vue-cdr-access/tests/unit/displayWrapper.spec.js
index 6ada31aa7c..bba0b717ef 100644
--- a/static/js/vue-cdr-access/tests/unit/displayWrapper.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/displayWrapper.spec.js
@@ -225,7 +225,7 @@ describe('displayWrapper.vue', () => {
         stubQueryResponse(`listJson/73bc003c-9603-4cd9-8a65-93a22520ef6a?.+&facetSelect=format%2Cgenre%2Clanguage%2Csubject%2Clocation%2CcreatedYear%2CcreatorContributor%2Cpublisher&.*`, response);
         stubQueryResponse(`record/73bc003c-9603-4cd9-8a65-93a22520ef6a/json`,
             {
-                'briefObject': briefObjectData,
+                'briefObject': briefObjectData.briefObject,
                 'resourceType': 'Collection',
                 'markedForDeletion': false
             });
diff --git a/static/js/vue-cdr-access/tests/unit/downloadOptions.spec.js b/static/js/vue-cdr-access/tests/unit/downloadOptions.spec.js
index 2553110fd7..a7a42b8272 100644
--- a/static/js/vue-cdr-access/tests/unit/downloadOptions.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/downloadOptions.spec.js
@@ -41,6 +41,24 @@ const record = {
         ]
 }
 
+const collectionRecord = {
+    filesizeTotal: 694904,
+    added: "2023-03-27T13:01:58.067Z",
+    title: "Collection Title",
+    type: "Collection",
+    datastream: [
+        "event_log|application/n-triples|event_log.nt|nt|4334|urn:sha1:aabf004766f954db4ac4ab9aa0a115bb10b708b4||"
+    ],
+    permissions: [
+        "viewMetadata", 'viewAccessCopies', 'viewReducedResImages', 'viewOriginal'
+    ],
+    groupRoleMap: {
+        authenticated: 'canViewOriginals',
+        everyone: 'canViewOriginals'
+    },
+    id: "4db695c0-5fd5-4abf-9248-2e115d43f57d"
+}
+
 const uuid = '4db695c0-5fd5-4abf-9248-2e115d43f57d';
 
 const div = document.createElement('div')
@@ -370,6 +388,32 @@ describe('downloadOption.vue', () => {
         expect(wrapper.find('#dropdown-menu').classes('show-list')).toBe(false);
     });
 
+    it('does not display a download button for collection', async () => {
+        await wrapper.setProps({
+            recordData: collectionRecord
+        });
+        expect(wrapper.find('.download').exists()).toBe(false);
+    });
+
+    it('shows contact buttons for collection with restrictions when not logged in', async () => {
+        let updatedBriefObj = cloneDeep(collectionRecord)
+        updatedBriefObj.permissions = [
+            "viewMetadata"
+        ];
+        updatedBriefObj.groupRoleMap = {
+            authenticated: 'canViewMetadata',
+            everyone: 'canViewMetadata'
+        };
+        await wrapper.setProps({
+            recordData: updatedBriefObj
+        });
+        await store.$patch({ username: '' })
+        await store.$patch({ isLoggedIn: false })
+
+        expect(wrapper.find('.image-download-options').exists()).toBe(false);
+        expect(wrapper.find('.contact').exists()).toBe(true);
+    });
+
     async function setRecordPermissions(rec, permissions) {
         const updated_data = cloneDeep(rec);
         updated_data.permissions = permissions;
diff --git a/static/js/vue-cdr-access/tests/unit/fileList.spec.js b/static/js/vue-cdr-access/tests/unit/fileList.spec.js
index d900f3d9b0..5827532dd6 100644
--- a/static/js/vue-cdr-access/tests/unit/fileList.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/fileList.spec.js
@@ -76,16 +76,12 @@ describe('fileList.vue', () => {
             props: {
                 childCount: 3,
                 editAccess: true,
-                viewOriginal: false,
+                viewOriginalAccess: false,
                 workId: 'e2f0d544-4f36-482c-b0ca-ba11f1251c01',
             }
         });
     });
 
-    it("displays a header with file count", () => {
-        expect(wrapper.find('h3').text()).toEqual("List of Items in This Work (3)");
-    });
-
     it("contains a table of files", () => {
         expect(wrapper.findComponent({ name: 'dataTable' }).exists()).toBe(true);
     });
diff --git a/static/js/vue-cdr-access/tests/unit/objectActions.spec.js b/static/js/vue-cdr-access/tests/unit/objectActions.spec.js
index 5759b0c3c6..0009b432b5 100644
--- a/static/js/vue-cdr-access/tests/unit/objectActions.spec.js
+++ b/static/js/vue-cdr-access/tests/unit/objectActions.spec.js
@@ -165,6 +165,12 @@ describe('objectActions.vue', () => {
         expect(wrapper.find('a.edit').exists()).toBe(false);
     });
 
+    it('does not show a bulk download option if user does not have viewOriginal permissions', async () => {
+        await setRecordPermissions(record, []);
+
+        expect(wrapper.find('a.bulk-download').exists()).toBe(false);
+    });
+
     it('does not show embargo info if there is no dataFileUrl', async () => {
         const updated_data = cloneDeep(record);
         updated_data.dataFileUrl = "";
@@ -175,8 +181,17 @@ describe('objectActions.vue', () => {
     });
 
     it('shows a view option if user can view originals and resource is a file', async () => {
-        await setRecordPermissions(record, ['viewMetadata', 'viewAccessCopies', 'viewReducedResImages',
-            'viewOriginal']);
+        const updated_data = cloneDeep(record);
+        updated_data.resourceType = 'File';
+        updated_data.briefObject.permissions = ['viewMetadata', 'viewAccessCopies', 'viewReducedResImages',
+            'viewOriginal'];
+        updated_data.briefObject.groupRoleMap = {
+            authenticated: 'canViewOriginals',
+            everyone: 'canViewOriginals'
+        }
+        await wrapper.setProps({
+            recordData: updated_data
+        });
 
         expect(wrapper.find('a.view').exists()).toBe(true);
     });
@@ -220,9 +235,7 @@ describe('objectActions.vue', () => {
     });
 
     it('shows view options if a user is not logged in and access is restricted', () => {
-        expect(wrapper.find('.restricted-access.actions').exists()).toBe(true);
-        expect(wrapper.find('.restricted-access.actions .login-link').exists()).toBe(true);
-        expect(wrapper.find('.restricted-access.actions .contact').exists()).toBe(true);
+        expect(wrapper.find('.restricted-access').exists()).toBe(true);
     });
 
     it('does not show a login option if a user is not logged in and logging in does not grant further access', async () => {
diff --git a/static/service-unavailable.html b/static/service-unavailable.html
index 0c5b4b4f5a..daabe3b479 100644
--- a/static/service-unavailable.html
+++ b/static/service-unavailable.html
@@ -2,7 +2,7 @@
 <html lang="en">
 <head>
     <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bulma/0.7.2/css/bulma.min.css">
+    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@1.0.2/css/versions/bulma-no-dark-mode.min.css">
     <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.5.0/css/all.css">
     <link rel="stylesheet" type="text/css" href="/static/css/cdr_access.css">
     <style>
diff --git a/web-access-app/src/main/java/edu/unc/lib/boxc/web/access/controllers/FullRecordController.java b/web-access-app/src/main/java/edu/unc/lib/boxc/web/access/controllers/FullRecordController.java
index f97e5c1f9d..d7ea46d366 100644
--- a/web-access-app/src/main/java/edu/unc/lib/boxc/web/access/controllers/FullRecordController.java
+++ b/web-access-app/src/main/java/edu/unc/lib/boxc/web/access/controllers/FullRecordController.java
@@ -21,14 +21,17 @@
 import edu.unc.lib.boxc.search.solr.services.ChildrenCountService;
 import edu.unc.lib.boxc.search.solr.services.GetCollectionIdService;
 import edu.unc.lib.boxc.search.solr.services.NeighborQueryService;
+import edu.unc.lib.boxc.web.common.auth.PatronActionPermissionsUtil;
 import edu.unc.lib.boxc.web.common.controllers.AbstractErrorHandlingSearchController;
 import edu.unc.lib.boxc.web.common.exceptions.RenderViewException;
 import edu.unc.lib.boxc.web.common.services.AccessCopiesService;
 import edu.unc.lib.boxc.web.common.services.FindingAidUrlService;
+import edu.unc.lib.boxc.web.common.services.WorkFilesizeService;
 import edu.unc.lib.boxc.web.common.services.XmlDocumentFilteringService;
 import edu.unc.lib.boxc.web.common.utils.ModsUtil;
 import edu.unc.lib.boxc.web.common.utils.SerializationUtil;
 import edu.unc.lib.boxc.web.common.view.XSLViewResolver;
+import org.apache.commons.lang3.StringUtils;
 import org.jdom2.Document;
 import org.jdom2.JDOMException;
 import org.jdom2.input.SAXBuilder;
@@ -54,6 +57,7 @@
 import java.util.TimeZone;
 import java.util.stream.Collectors;
 
+import static edu.unc.lib.boxc.auth.api.AccessPrincipalConstants.ON_CAMPUS_PRINC;
 import static edu.unc.lib.boxc.auth.fcrepo.services.GroupsThreadStore.getAgentPrincipals;
 import static edu.unc.lib.boxc.common.xml.SecureXMLFactory.createSAXBuilder;
 import static edu.unc.lib.boxc.search.api.FacetConstants.MARKED_FOR_DELETION;
@@ -92,6 +96,8 @@ public class FullRecordController extends AbstractErrorHandlingSearchController
     @Autowired
     private AccessCopiesService accessCopiesService;
     @Autowired
+    private WorkFilesizeService workFilesizeService;
+    @Autowired
     private XmlDocumentFilteringService xmlDocumentFilteringService;
     @Autowired
     private ObjectAclFactory objectAclFactory;
@@ -163,7 +169,8 @@ public String getFullObjectView(String pidString) {
         PID pid = PIDs.get(pidString);
         LOG.debug("Getting full record for {}", pid);
 
-        AccessGroupSet principals = getAgentPrincipals().getPrincipals();
+        var agent = getAgentPrincipals();
+        AccessGroupSet principals = agent.getPrincipals();
         aclService.assertHasAccess("Insufficient permissions to access full record for " + pidString,
                 pid, principals, Permission.viewMetadata);
 
@@ -225,6 +232,15 @@ public String getFullObjectView(String pidString) {
             recordProperties.put("dataFileUrl", dataFileUrl);
         }
 
+        Long totalDownloadSize = null;
+        boolean canBulkDownload = false;
+        if (ResourceType.Work.nameEquals(resourceType)) {
+            canBulkDownload = PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, agent);
+            totalDownloadSize = workFilesizeService.getTotalFilesize(briefObject, principals);
+        }
+        recordProperties.put("totalDownloadSize", totalDownloadSize);
+        recordProperties.put("canBulkDownload", canBulkDownload);
+
         accessCopiesService.populateThumbnailId(briefObject, principals, true);
 
         List<String> objectStatus = briefObject.getStatus();
diff --git a/web-access-app/src/main/webapp/WEB-INF/html/headElements.html b/web-access-app/src/main/webapp/WEB-INF/html/headElements.html
index a5cd7fada2..a6b2b2e2ee 100644
--- a/web-access-app/src/main/webapp/WEB-INF/html/headElements.html
+++ b/web-access-app/src/main/webapp/WEB-INF/html/headElements.html
@@ -1,5 +1,5 @@
 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/bulma/0.7.2/css/bulma.min.css">
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bulma@1.0.2/css/versions/bulma-no-dark-mode.min.css">
 <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.5.0/css/all.css">
 <link rel="stylesheet" type="text/css" href="/static/css/cdr_access.css" />
 
diff --git a/web-access-app/src/main/webapp/WEB-INF/solr-search-context.xml b/web-access-app/src/main/webapp/WEB-INF/solr-search-context.xml
index 9be25541d1..5d627ce948 100644
--- a/web-access-app/src/main/webapp/WEB-INF/solr-search-context.xml
+++ b/web-access-app/src/main/webapp/WEB-INF/solr-search-context.xml
@@ -102,6 +102,11 @@
         <property name="permissionsHelper" ref="permsHelper" />
         <property name="solrSearchService" ref="queryLayer" />
     </bean>
+
+    <bean id="workFilesizeService" class="edu.unc.lib.boxc.web.common.services.WorkFilesizeService">
+        <property name="globalPermissionEvaluator" ref="globalPermissionEvaluator" />
+        <property name="solrSearchService" ref="queryLayer" />
+    </bean>
     
     <bean id="queryLayer" class="edu.unc.lib.boxc.web.common.services.SolrQueryLayerService"
         init-method="initializeSolrServer">
diff --git a/web-common/src/main/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtil.java b/web-common/src/main/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtil.java
new file mode 100644
index 0000000000..fe697eb34b
--- /dev/null
+++ b/web-common/src/main/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtil.java
@@ -0,0 +1,34 @@
+package edu.unc.lib.boxc.web.common.auth;
+
+import edu.unc.lib.boxc.auth.api.Permission;
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
+import edu.unc.lib.boxc.auth.api.models.AgentPrincipals;
+import edu.unc.lib.boxc.auth.api.services.AccessControlService;
+import edu.unc.lib.boxc.model.api.ids.PID;
+import org.apache.commons.lang3.StringUtils;
+
+import static edu.unc.lib.boxc.auth.api.AccessPrincipalConstants.ON_CAMPUS_PRINC;
+
+/**
+ * Utility class for determining permissions for patron actions
+ * @author bbpennel
+ */
+public class PatronActionPermissionsUtil {
+    private PatronActionPermissionsUtil() {
+    }
+
+    /**
+     * Determine if the provided agent has permission to download a bulk export zip of the provided object
+     * @param aclService
+     * @param pid
+     * @param agent
+     * @return
+     */
+    public static boolean hasBulkDownloadPermission(AccessControlService aclService, PID pid, AgentPrincipals agent) {
+        AccessGroupSet principals = agent.getPrincipals();
+        if (StringUtils.isBlank(agent.getUsername()) && !principals.contains(ON_CAMPUS_PRINC)) {
+            return false;
+        }
+        return aclService.hasAccess(pid, principals, Permission.viewOriginal);
+    }
+}
diff --git a/web-common/src/main/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeService.java b/web-common/src/main/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeService.java
new file mode 100644
index 0000000000..7d96cbeadc
--- /dev/null
+++ b/web-common/src/main/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeService.java
@@ -0,0 +1,67 @@
+package edu.unc.lib.boxc.web.common.services;
+
+import edu.unc.lib.boxc.auth.api.Permission;
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
+import edu.unc.lib.boxc.auth.api.services.GlobalPermissionEvaluator;
+import edu.unc.lib.boxc.search.api.SearchFieldKey;
+import edu.unc.lib.boxc.search.api.facets.CutoffFacet;
+import edu.unc.lib.boxc.search.api.models.ContentObjectRecord;
+import edu.unc.lib.boxc.search.api.requests.SearchRequest;
+import edu.unc.lib.boxc.search.api.requests.SearchState;
+import edu.unc.lib.boxc.search.solr.services.SolrSearchService;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import java.util.List;
+
+/**
+ * Service to retrieve the total filesize of all files in a work
+ *
+ * @author lfarrell
+ */
+public class WorkFilesizeService {
+    private static final Logger log = LoggerFactory.getLogger(AccessCopiesService.class);
+
+    private GlobalPermissionEvaluator globalPermissionEvaluator;
+    private SolrSearchService solrSearchService;
+
+    public Long getTotalFilesize(ContentObjectRecord contentObjectRecord, AccessGroupSet principals) {
+        var request = buildChildrenQuery(contentObjectRecord, principals);
+        var resp = solrSearchService.getSearchResults(request);
+
+        if (resp.getResultCount() > 0) {
+            return resp.getResultList().stream()
+                    .mapToLong(ContentObjectRecord::getFilesizeSort)
+                    .reduce(0, Long::sum);
+        } else {
+            log.debug("No child objects for work {}", contentObjectRecord.getId());
+            return null;
+        }
+    }
+
+    private SearchRequest buildChildrenQuery(ContentObjectRecord briefObj, AccessGroupSet principals) {
+        SearchState searchState = new SearchState();
+        if (!globalPermissionEvaluator.hasGlobalPrincipal(principals)) {
+            searchState.setPermissionLimits(List.of(Permission.viewOriginal));
+        }
+        searchState.setFacetsToRetrieve(null);
+        searchState.setIgnoreMaxRows(true);
+        searchState.setRowsPerPage(3000);
+        searchState.setSortType("default");
+        searchState.setResultFields(List.of(SearchFieldKey.FILESIZE.name()));
+        CutoffFacet selectedPath = briefObj.getPath();
+        searchState.addFacet(selectedPath);
+        SearchRequest searchRequest = new SearchRequest(searchState, principals);
+        searchRequest.setApplyCutoffs(true);
+
+        return searchRequest;
+    }
+
+    public void setGlobalPermissionEvaluator(GlobalPermissionEvaluator globalPermissionEvaluator) {
+        this.globalPermissionEvaluator = globalPermissionEvaluator;
+    }
+
+    public void setSolrSearchService(SolrSearchService solrSearchService) {
+        this.solrSearchService = solrSearchService;
+    }
+}
diff --git a/web-common/src/test/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtilTest.java b/web-common/src/test/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtilTest.java
new file mode 100644
index 0000000000..f70d13b1b0
--- /dev/null
+++ b/web-common/src/test/java/edu/unc/lib/boxc/web/common/auth/PatronActionPermissionsUtilTest.java
@@ -0,0 +1,75 @@
+package edu.unc.lib.boxc.web.common.auth;
+
+import edu.unc.lib.boxc.auth.api.AccessPrincipalConstants;
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
+import edu.unc.lib.boxc.auth.api.models.AgentPrincipals;
+import edu.unc.lib.boxc.auth.api.services.AccessControlService;
+import edu.unc.lib.boxc.auth.fcrepo.models.AccessGroupSetImpl;
+import edu.unc.lib.boxc.auth.fcrepo.models.AgentPrincipalsImpl;
+import edu.unc.lib.boxc.model.api.ids.PID;
+import edu.unc.lib.boxc.model.fcrepo.ids.PIDs;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.mockito.Mock;
+
+import static edu.unc.lib.boxc.auth.api.Permission.viewOriginal;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.when;
+import static org.mockito.MockitoAnnotations.openMocks;
+
+/**
+ * @author bbpennel
+ */
+public class PatronActionPermissionsUtilTest {
+    private static final String WORK_ID = "f277bb38-272c-471c-a28a-9887a1328a1f";
+    @Mock
+    private AccessControlService aclService;
+    private PID pid;
+    private final static String USERNAME = "test_user";
+    private AccessGroupSet groups = new AccessGroupSetImpl("adminGroup");
+    private AgentPrincipals agent;
+
+    private AutoCloseable autoCloseable;
+
+    @BeforeEach
+    public void setup() {
+        autoCloseable = openMocks(this);
+        pid = PIDs.get(WORK_ID);
+        agent = new AgentPrincipalsImpl(USERNAME, groups);
+    }
+
+    @AfterEach
+    public void tearDown() throws Exception {
+        autoCloseable.close();
+    }
+
+    @Test
+    public void testHasBulkDownloadPermissionPermit() {
+        when(aclService.hasAccess(eq(pid), any(), eq(viewOriginal))).thenReturn(true);
+        assertTrue(PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, agent));
+    }
+
+    @Test
+    public void testHasBulkDownloadPermissionNotAuthenticatedOrOnCampusReject() {
+        when(aclService.hasAccess(eq(pid), any(), eq(viewOriginal))).thenReturn(true);
+        var unauthAgent = new AgentPrincipalsImpl(null, null);
+        assertFalse(PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, unauthAgent));
+    }
+
+    @Test
+    public void testHasBulkDownloadPermissionOnCampusPermit() {
+        when(aclService.hasAccess(eq(pid), any(), eq(viewOriginal))).thenReturn(true);
+        var unauthAgent = new AgentPrincipalsImpl(null, new AccessGroupSetImpl(AccessPrincipalConstants.ON_CAMPUS_PRINC));
+        assertTrue(PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, unauthAgent));
+    }
+
+    @Test
+    public void testHasBulkDownloadPermissionNoPermissionReject() {
+        when(aclService.hasAccess(eq(pid), any(), eq(viewOriginal))).thenReturn(false);
+        assertFalse(PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, agent));
+    }
+}
diff --git a/web-common/src/test/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeServiceTest.java b/web-common/src/test/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeServiceTest.java
new file mode 100644
index 0000000000..ca468e2ee6
--- /dev/null
+++ b/web-common/src/test/java/edu/unc/lib/boxc/web/common/services/WorkFilesizeServiceTest.java
@@ -0,0 +1,92 @@
+package edu.unc.lib.boxc.web.common.services;
+
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
+import edu.unc.lib.boxc.auth.api.services.GlobalPermissionEvaluator;
+import edu.unc.lib.boxc.auth.fcrepo.models.AccessGroupSetImpl;
+import edu.unc.lib.boxc.model.api.ResourceType;
+import edu.unc.lib.boxc.search.api.ContentCategory;
+import edu.unc.lib.boxc.search.api.requests.SearchRequest;
+import edu.unc.lib.boxc.search.solr.models.ContentObjectSolrRecord;
+import edu.unc.lib.boxc.search.solr.responses.SearchResultResponse;
+import edu.unc.lib.boxc.search.solr.services.SolrSearchService;
+import org.apache.solr.client.solrj.SolrServerException;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.mockito.ArgumentCaptor;
+import org.mockito.Captor;
+import org.mockito.Mock;
+
+import java.io.IOException;
+import java.util.Collections;
+import java.util.List;
+import java.util.UUID;
+
+import static edu.unc.lib.boxc.model.api.DatastreamType.JP2_ACCESS_COPY;
+import static edu.unc.lib.boxc.model.api.DatastreamType.ORIGINAL_FILE;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.Mockito.when;
+import static org.mockito.MockitoAnnotations.openMocks;
+
+/**
+ * @author lfarrell
+ */
+public class WorkFilesizeServiceTest {
+    private AccessGroupSet principals;
+
+    private WorkFilesizeService workFilesizeService;
+
+    private AutoCloseable closeable;
+
+    @Mock
+    private GlobalPermissionEvaluator globalPermissionEvaluator;
+    @Mock
+    private SolrSearchService solrSearchService;
+    @Mock
+    private SearchResultResponse searchResultResponse;
+    @Captor
+    private ArgumentCaptor<SearchRequest> searchRequestCaptor;
+
+    @BeforeEach
+    public void init() throws IOException, SolrServerException {
+        closeable = openMocks(this);
+
+        principals = new AccessGroupSetImpl("group");
+
+        workFilesizeService = new WorkFilesizeService();
+        workFilesizeService.setSolrSearchService(solrSearchService);
+        workFilesizeService.setGlobalPermissionEvaluator(globalPermissionEvaluator);
+
+        when(solrSearchService.getSearchResults(searchRequestCaptor.capture())).thenReturn(searchResultResponse);
+        when(searchResultResponse.getResultCount()).thenReturn(1L);
+    }
+
+    @AfterEach
+    void closeService() throws Exception {
+        closeable.close();
+    }
+
+    @Test
+    public void workObjectWithBulkDownload() {
+        var fileSize = 8194L;
+        var mdObject = createObject(ResourceType.Work, fileSize);
+        when(solrSearchService.getSearchResults(searchRequestCaptor.capture()).getResultList())
+                .thenReturn(List.of(mdObject));
+        assertEquals(fileSize, workFilesizeService.getTotalFilesize(mdObject, principals));
+    }
+
+    private ContentObjectSolrRecord createObject(ResourceType resourceType, Long filesize) {
+        var mdObjectImg = new ContentObjectSolrRecord();
+        mdObjectImg.setResourceType(resourceType.name());
+        var id = UUID.randomUUID().toString();
+        mdObjectImg.setId(id);
+        mdObjectImg.setFilesizeSort(filesize);
+        List<String> imgDatastreams = List.of(
+                ORIGINAL_FILE.getId() + "|image/png|file.png|png|" + filesize + "|urn:sha1:checksum|",
+                JP2_ACCESS_COPY.getId() + "|image/jp2|bunny.jp2|jp2|||" + id + "|1200x1200");
+        mdObjectImg.setFileFormatCategory(Collections.singletonList(ContentCategory.image.getDisplayName()));
+        mdObjectImg.setFileFormatType(Collections.singletonList("image/png"));
+        mdObjectImg.setDatastream(imgDatastreams);
+        return mdObjectImg;
+    }
+}
diff --git a/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkController.java b/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkController.java
new file mode 100644
index 0000000000..483fd96dc4
--- /dev/null
+++ b/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkController.java
@@ -0,0 +1,59 @@
+package edu.unc.lib.boxc.web.services.rest;
+
+import edu.unc.lib.boxc.auth.api.exceptions.AccessRestrictionException;
+import edu.unc.lib.boxc.auth.api.models.AgentPrincipals;
+import edu.unc.lib.boxc.auth.api.services.AccessControlService;
+import edu.unc.lib.boxc.model.api.ids.PID;
+import edu.unc.lib.boxc.model.fcrepo.ids.PIDs;
+import edu.unc.lib.boxc.operations.impl.download.DownloadBulkRequest;
+import edu.unc.lib.boxc.operations.impl.download.DownloadBulkService;
+import edu.unc.lib.boxc.web.common.auth.PatronActionPermissionsUtil;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.core.io.FileSystemResource;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.ResponseBody;
+
+import static edu.unc.lib.boxc.auth.fcrepo.services.GroupsThreadStore.getAgentPrincipals;
+import static org.springframework.http.HttpHeaders.CONTENT_DISPOSITION;
+
+/**
+ * Controller for downloading FileObject original files from a WorkObject into a zip file
+ */
+@Controller
+public class DownloadBulkController {
+    @Autowired
+    private AccessControlService aclService;
+    @Autowired
+    private DownloadBulkService downloadBulkService;
+
+    @RequestMapping("/bulkDownload/{id}")
+    @ResponseBody
+    public ResponseEntity<FileSystemResource> getZip(@PathVariable("id") String pidString) {
+        PID pid = PIDs.get(pidString);
+
+        var agentPrincipal = getAgentPrincipals();
+        assertHasPermission(pid, agentPrincipal);
+        var request = new DownloadBulkRequest(pidString, agentPrincipal.getPrincipals());
+        var path = downloadBulkService.downloadBulk(request);
+        var filename = DownloadBulkService.getZipFilename(pidString);
+
+        return ResponseEntity.ok()
+                .header(CONTENT_DISPOSITION,"attachment;filename=\"" + filename + "\"")
+                .contentType(MediaType.valueOf("application/zip"))
+                .body(new FileSystemResource(path));
+    }
+
+    public void assertHasPermission(PID pid, AgentPrincipals agent) {
+        if (!PatronActionPermissionsUtil.hasBulkDownloadPermission(aclService, pid, agent)) {
+            throw new AccessRestrictionException("User has insufficient permissions to download bulk export");
+        }
+    }
+
+    public void setDownloadBulkService(DownloadBulkService downloadBulkService) {
+        this.downloadBulkService = downloadBulkService;
+    }
+}
diff --git a/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/exceptions/RestResponseEntityExceptionHandler.java b/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/exceptions/RestResponseEntityExceptionHandler.java
index 477497d251..e5d9104b53 100644
--- a/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/exceptions/RestResponseEntityExceptionHandler.java
+++ b/web-services-app/src/main/java/edu/unc/lib/boxc/web/services/rest/exceptions/RestResponseEntityExceptionHandler.java
@@ -4,6 +4,7 @@
 import edu.unc.lib.boxc.model.api.exceptions.InvalidOperationForObjectType;
 import java.io.EOFException;
 
+import edu.unc.lib.boxc.model.api.exceptions.ObjectTypeMismatchException;
 import edu.unc.lib.boxc.search.api.exceptions.SolrRuntimeException;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -97,6 +98,12 @@ protected ResponseEntity<Object> handleUnavailable(Exception ex, WebRequest requ
         }
     }
 
+    @ExceptionHandler(value = { ObjectTypeMismatchException.class })
+    protected ResponseEntity<Object> handleObjectTypeMismatch(RuntimeException ex, WebRequest request) {
+        String bodyOfResponse = "Object type mismatch";
+        return handleExceptionInternal(ex, bodyOfResponse, new HttpHeaders(), HttpStatus.BAD_REQUEST, request);
+    }
+
     @ExceptionHandler(value = { Exception.class })
     protected ResponseEntity<Object> handleUncaught(Exception ex, WebRequest request) {
         try {
diff --git a/web-services-app/src/main/webapp/WEB-INF/service-context.xml b/web-services-app/src/main/webapp/WEB-INF/service-context.xml
index 4dd4762ecc..5b5540aacb 100644
--- a/web-services-app/src/main/webapp/WEB-INF/service-context.xml
+++ b/web-services-app/src/main/webapp/WEB-INF/service-context.xml
@@ -493,6 +493,13 @@
         <property name="baseIiifv3Path" value="${services.api.url}iiif/v3/"/>
         <property name="httpClientConnectionManager" ref="httpClientConnectionManager" />
     </bean>
+
+    <bean id="downloadBulkService" class="edu.unc.lib.boxc.operations.impl.download.DownloadBulkService">
+        <property name="aclService" ref="aclService"/>
+        <property name="repoObjLoader" ref="repositoryObjectLoader"/>
+        <property name="basePath" value="${data.dir}/zip/"/>
+        <property name="fileLimit" value="100" />
+    </bean>
     
     <bean class="org.springframework.beans.factory.config.MethodInvokingFactoryBean">
         <property name="staticMethod" value="edu.unc.lib.boxc.web.common.utils.SerializationUtil.injectSettings"/>
diff --git a/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkControllerIT.java b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkControllerIT.java
new file mode 100644
index 0000000000..24490b497f
--- /dev/null
+++ b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadBulkControllerIT.java
@@ -0,0 +1,157 @@
+package edu.unc.lib.boxc.web.services.rest;
+
+import edu.unc.lib.boxc.auth.api.Permission;
+import edu.unc.lib.boxc.auth.api.exceptions.AccessRestrictionException;
+import edu.unc.lib.boxc.auth.api.models.AccessGroupSet;
+import edu.unc.lib.boxc.auth.api.services.AccessControlService;
+import edu.unc.lib.boxc.auth.fcrepo.models.AccessGroupSetImpl;
+import edu.unc.lib.boxc.auth.fcrepo.services.GroupsThreadStore;
+import edu.unc.lib.boxc.model.api.ids.PID;
+import edu.unc.lib.boxc.model.api.objects.BinaryObject;
+import edu.unc.lib.boxc.model.api.objects.FileObject;
+import edu.unc.lib.boxc.model.api.objects.RepositoryObjectLoader;
+import edu.unc.lib.boxc.model.api.objects.WorkObject;
+import edu.unc.lib.boxc.model.fcrepo.ids.PIDs;
+import edu.unc.lib.boxc.model.fcrepo.test.TestHelper;
+import edu.unc.lib.boxc.operations.impl.download.DownloadBulkService;
+import edu.unc.lib.boxc.web.services.rest.exceptions.RestResponseEntityExceptionHandler;
+import edu.unc.lib.boxc.web.services.utils.DownloadTestHelper;
+import org.apache.commons.io.IOUtils;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+
+import java.io.ByteArrayInputStream;
+import java.io.FileInputStream;
+import java.io.FileNotFoundException;
+import java.io.IOException;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.zip.ZipEntry;
+import java.util.zip.ZipInputStream;
+
+import static edu.unc.lib.boxc.auth.api.Permission.viewOriginal;
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.doThrow;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+import static org.mockito.MockitoAnnotations.openMocks;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+public class DownloadBulkControllerIT {
+    private static final String WORK_ID = "f277bb38-272c-471c-a28a-9887a1328a1f";
+    private static final String FILE_ID = "83c2d7f8-2e6b-4f0b-ab7e-7397969c0682";
+    private final static String USERNAME = "test_user";
+    private final static AccessGroupSet GROUPS = new AccessGroupSetImpl("adminGroup");
+    @Mock
+    private AccessControlService aclService;
+    @Mock
+    private RepositoryObjectLoader repositoryObjectLoader;
+    @Mock
+    private WorkObject workObject;
+    @Mock
+    private FileObject fileObject;
+    private PID filePid;
+    private PID workPid;
+    @TempDir
+    public Path tmpFolder;
+    @InjectMocks
+    private DownloadBulkController controller;
+    private MockMvc mvc;
+    private FileInputStream fileInputStream;
+    private AutoCloseable closeable;
+
+    @BeforeEach
+    public void init() throws FileNotFoundException {
+        closeable = openMocks(this);
+        DownloadBulkService downloadBulkService = new DownloadBulkService();
+        downloadBulkService.setAclService(aclService);
+        downloadBulkService.setBasePath(tmpFolder);
+        downloadBulkService.setRepoObjLoader(repositoryObjectLoader);
+        downloadBulkService.setFileLimit(5);
+        controller.setDownloadBulkService(downloadBulkService);
+        fileInputStream = new FileInputStream("src/test/resources/__files/bunny.jpg");
+        mvc = MockMvcBuilders.standaloneSetup(controller)
+                .setControllerAdvice(new RestResponseEntityExceptionHandler())
+                .build();
+        TestHelper.setContentBase("http://localhost:48085/rest");
+        workPid = PIDs.get(WORK_ID);
+        filePid = PIDs.get(FILE_ID);
+        GroupsThreadStore.storeUsername(USERNAME);
+        GroupsThreadStore.storeGroups(GROUPS);
+    }
+
+    @AfterEach
+    void closeService() throws Exception {
+        closeable.close();
+    }
+
+    @Test
+    public void noAccessTest() throws Exception {
+        when(aclService.hasAccess(eq(workPid), any(), eq(viewOriginal))).thenReturn(false);
+
+        mvc.perform(get("/bulkDownload/" + WORK_ID))
+                .andExpect(status().isForbidden())
+                .andReturn();
+    }
+
+    @Test
+    public void userNotLoggedInTest() throws Exception {
+        GroupsThreadStore.clearStore();
+        when(aclService.hasAccess(eq(workPid), any(), eq(viewOriginal))).thenReturn(true);
+
+
+        mvc.perform(get("/bulkDownload/" + WORK_ID))
+                .andExpect(status().isForbidden())
+                .andReturn();
+    }
+
+    @Test
+    public void successTest() throws Exception {
+        when(repositoryObjectLoader.getWorkObject(any())).thenReturn(workObject);
+        when(workObject.getMembers()).thenReturn(List.of(fileObject));
+        when(fileObject.getPid()).thenReturn(filePid);
+        var binObj = mock(BinaryObject.class);
+        when(fileObject.getOriginalFile()).thenReturn(binObj);
+        when(binObj.getBinaryStream()).thenReturn(fileInputStream);
+        when(binObj.getFilename()).thenReturn("bunny.jpg");
+
+        when(aclService.hasAccess(eq(workPid), any(), eq(viewOriginal))).thenReturn(true);
+        when(aclService.hasAccess(eq(filePid), any(),
+                eq(Permission.viewOriginal))).thenReturn(true);
+
+        var result = mvc.perform(get("/bulkDownload/" + WORK_ID))
+                .andExpect(status().is2xxSuccessful())
+                .andReturn();
+
+        var response = result.getResponse();
+        var bytes = response.getContentAsByteArray();
+        var zipInputStream =  new ZipInputStream(new ByteArrayInputStream(bytes));
+
+        assertZipFiles(zipInputStream, List.of("bunny.jpg"));
+        assertEquals("application/zip", response.getHeader("Content-Type"));
+    }
+
+    private void assertZipFiles(ZipInputStream stream, List<String> filenames) throws IOException {
+        var actualFilenames = new ArrayList<String>();
+        try (stream) {
+            ZipEntry entry;
+            while ((entry = stream.getNextEntry()) != null) {
+                actualFilenames.add(entry.getName());
+                var actualContent = IOUtils.toByteArray(stream);
+                DownloadTestHelper.assertCorrectImageReturned(actualContent);
+            }
+        }
+        assertEquals(filenames, actualFilenames);
+    }
+}
diff --git a/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadImageControllerIT.java b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadImageControllerIT.java
index 6e9c75f987..86d1763da8 100644
--- a/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadImageControllerIT.java
+++ b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/rest/DownloadImageControllerIT.java
@@ -18,6 +18,7 @@
 import edu.unc.lib.boxc.web.services.processing.DownloadImageService;
 import edu.unc.lib.boxc.web.services.rest.exceptions.RestResponseEntityExceptionHandler;
 import edu.unc.lib.boxc.operations.api.images.ImageServerUtil;
+import edu.unc.lib.boxc.web.services.utils.DownloadTestHelper;
 import org.apache.commons.io.FileUtils;
 import org.junit.jupiter.api.AfterEach;
 import org.junit.jupiter.api.BeforeEach;
@@ -149,7 +150,8 @@ public void testGetImageAtPixelSizeSmallerThanFull() throws Exception {
         var response = result.getResponse();
 
         assertEquals("attachment; filename=bunny_800px.jpg", response.getHeader(CONTENT_DISPOSITION));
-        assertCorrectImageReturned(response);
+        assertEquals("image/jpeg", response.getContentType());
+        DownloadTestHelper.assertCorrectImageReturned(response.getContentAsByteArray());
     }
 
     @Test
@@ -182,7 +184,8 @@ public void testGetImageAtPixelSizeBiggerThanFull() throws Exception {
         var response = result.getResponse();
 
         assertEquals("attachment; filename=bunny_max.jpg", response.getHeader(CONTENT_DISPOSITION));
-        assertCorrectImageReturned(response);
+        assertEquals("image/jpeg", response.getContentType());
+        DownloadTestHelper.assertCorrectImageReturned(response.getContentAsByteArray());
     }
 
     @Test
@@ -255,7 +258,8 @@ public void testGetImageFromJp2AtPixelSizeBiggerThanFull() throws Exception {
         var response = result.getResponse();
 
         assertEquals("attachment; filename=bunny_max.jpg", response.getHeader(CONTENT_DISPOSITION));
-        assertCorrectImageReturned(response);
+        assertEquals("image/jpeg", response.getContentType());
+        DownloadTestHelper.assertCorrectImageReturned(response.getContentAsByteArray());
     }
 
     @Test
@@ -390,13 +394,4 @@ public void testGetAccessImageSolrUnavailable() throws Exception {
                 .andExpect(status().isServiceUnavailable())
                 .andReturn();
     }
-
-    private void assertCorrectImageReturned(MockHttpServletResponse response) throws IOException {
-        assertEquals("image/jpeg", response.getContentType());
-
-        var responseContent = response.getContentAsByteArray();
-        byte[] imageContent = FileUtils.readFileToByteArray(new File("src/test/resources/__files/bunny.jpg"));
-
-        assertArrayEquals(responseContent, imageContent);
-    }
 }
diff --git a/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/utils/DownloadTestHelper.java b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/utils/DownloadTestHelper.java
new file mode 100644
index 0000000000..279ce1a658
--- /dev/null
+++ b/web-services-app/src/test/java/edu/unc/lib/boxc/web/services/utils/DownloadTestHelper.java
@@ -0,0 +1,19 @@
+package edu.unc.lib.boxc.web.services.utils;
+
+import org.apache.commons.io.FileUtils;
+import org.springframework.mock.web.MockHttpServletResponse;
+
+import java.io.File;
+import java.io.IOException;
+
+import static org.junit.jupiter.api.Assertions.assertArrayEquals;
+
+public class DownloadTestHelper {
+    public static void assertCorrectImageReturned(byte[] actualContent) throws IOException {
+        byte[] imageContent = FileUtils.readFileToByteArray(new File("src/test/resources/__files/bunny.jpg"));
+
+        assertArrayEquals(imageContent, actualContent);
+    }
+
+
+}