Album permissions
|
peshko
Joined: 2010-11-22
Posts: 81 |
Posted: Mon, 2011-01-24 03:49
|
|
Here is the scenario. I have my parent album (let's name it Album) and have nested album in it named Nested_Album. I have 3 groups: Everybody, Registered, World My permissions for Album are Everybody: Allow - View, View Full Size; Deny - Edit, Add My permissions for Nested_Album are Everybody: Deny - View, View Full Size, Edit, Add The idea is that I'd like to give permission to the users in Registered and World group ONLY to view the Nested_Album. Apparently, no one can see the album. Regardless if the user is admin or not and part of any group. If I enable View and View Full Size to everybody than obviously everybody can see the album, but that obsoletes the purpose. What am I doing wrong? Thanks! |
|
Posts: 81
Just to add that the user (Test) I am logging in with is member of all three groups - Everybody, Registered and World and is also Admin.
I just did another test. I disabled the View and View Full Size to the Album, basically forcing only registered users to be able to see the pictures in the Album, and I hoped the Nested_Album.
The result was that Test user and even admin get broken links thru the entire Gallery.
Something is wrong...
Posts: 81
anybody with the same issues?
Posts: 16504
I'm not able to duplicate this. Please upgrade to the latest version (3.0.1 was just released)
Then try running the "Fix gallery" task under Admin > Maintenance
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 81
I am running 3.0.1.
Here are some screenshots. The top album is called Gallery and permissons are in Screeenshot3.png
In level below is album called Shanandoah Valley, VA and permissions are in Screenshot2.png.
And then Screehnshot1.png show how we see the album and the permissions. I am logged in as admin and he is a member of all groups.
I run Fix gallery, but didn't make any difference.
Any help would be appreciated.
Posts: 81
Just to add you can see in Screenshot1.png how I see the pictures as broken links...
Posts: 81
just jecking to see if anybody can help with that...
Posts: 81
I just did a fresh install and still have the same access problems. Any help would be appreciated.
Posts: 97
Using v3.01 and I have the same problem. The images disappear (even for the registered authorized user) unless I enable everybody.
Posts: 2
same Problem here
Posts: 81
I just upgraded from 3.0.1 to 3.0.2 and still have the same problem...Additionally, when I try to update album permissions, I don't see icons anymore. I see links...passive allowed icon, denied icon, locked icon, etc...
Posts: 16504
Try switching to the default Wind theme and see if you can make those changes there. This really looks and sounds like a theme related issue.
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 81
You are correct. The icons came back with the Wind theme. The functionality is still not there...Eveyrthing I described above back in Jan is still valid. I cannot do Album permissions and make sure that only a particular group of people can see that album...
Posts: 81
is thisz a generic permission problem with G3?
Posts: 81
nivekiam, any comment?
Posts: 6
peshko: May I ask, how are you able to add the World group in there? (through db?). Thanks. I experience w/ "Oh no! Your server needs a configuration change in order for you to hide photos! Ask your server administrator to enable mod_rewrite and set AllowOverride FileInfo Options to fix this." When try to edit album permission. Do you have any though on that. Thanks
Posts: 81
nmai, you should enable mod_rewrite. This is done at apache level.
nivekiam, any way to fix the permission problem?
Posts: 6
peshko: Yes I do aware of that; I use Suse Ent. Do you know which config file you have to modify? Can you give me some direction. Thanks
Posts: 6
I've got this problem too. Broken links/pics when "Everybody" have no access. All other users/groups have set permissions allowed. Why is that? We have to show the gallery to all of the internet? :p
Posts: 6
Didnt have mod_rewrite on, so now it seems to work.
im kind of new.
Posts: 5
I run SuSE 11.2 too. You need to edit /etc/apache2/sysconfig.d/loadmodule.conf and make sure that LoadModule rewrite_module modules/mod_rewrite.so is there and is uncommented. Then restart apache.
Posts: 5
I am really SURPRISED that NOBODY PAYS ANY ATTENTION to this. I have submitted this back in January. You would think that somebody from the development would chime in ?!?!?!
Is this ever going to work or not???????? If not why would we even have modules/functions related to users when you can't effectively use them...????????
Posts: 16504
You mean June 5th? Where did you submit anything in January?
I'm still not able to duplicate any permission issue being reported here. I do know there is a user interface issue with the permissions dialog that doesn't make it readily visible to know where you are. Could someone post very detailed instructions on how to duplicate this?
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 81
I mean Jan 23, if you look up in the thread. I changed my computer and used diff login back in June 5. peshko and probev it is still the same. Yet, regardless of the user that submitted the problem, it has not been worked out since...Jan 23.
Posts: 16504
Don't know how I'm suppose to know that or why you have 2 user names. My response and question still stands:
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 27300
I can't duplicate this issue either.
If nobody can.... then it will be left till next January or June.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
Forgot to mention. Look at the very first post. And this is done on a brand new gallery deployment with no additional modules and the default themes.
The goal is to give permissions to a particular group of people to view a particular album. Again, maybe there is a diff way to do that, but at the very first post I explained how I did set up the permissions for the Nested_Album. What happens is I get broken links/pics when 'Everybody' have no access. My 'World' group has Allow for 'Nested_Album' and Deny for the parent 'Album'.
How can I allow access to the 'Nested_Album' only for the users in the 'World' group and not for 'Everybody'???
This is a simple permissions question...I even posted screenshots up there, but I guess I will have to post again...
Users_Groups.png will show you what I have right now.
Default_Perm.png shows the default permissions for the 'Botanical Garden, 2009' album.
I am changing the permissions of that album to give access only to the group 'World'. New permissions are in New_perm.png.
The_main_gallery_page_after_permission_change_on_the_nested_album.png shows what the 'Test One' user sees when he tries to access the gallery. Basically he not see anything. AGAIN the purpose is that he should not be able to see 'Botanical Garden, 2009' album only!
Wrong_Permission.png shows that when I changed the permissions for 'Botanical Garden, 2009' album, it changed it all the way up to the main Gallery page. Why?
I believe that this is detailed enough, correct?
I am not asking anybody to remember anyone's username, what I was trying to say is that this problem exists for more than just me and for more than 6 months.....
Posts: 81
Dave, what exactly can't you duplicate? Did you look at my scenario on a plain gallery deployment?
Posts: 27300
When I get time I will try to reproduce, now that we have steps and screenshots.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 4
There must be a bug in the permission function.
I have the same Problem to.
I have a public folder "my pictures" with asses to Everybody and a subfolder with "my private picture". The contend to this subfolder should only be visible for Registered Users.
There is no way to set up his.
I'm wondering, is the permission function not used by anyone…………
Posts: 81
That was exactly my question. Let's see if it can be reproduced. I provided snapshots, etc.
Posts: 27300
I think this is the issue. In G3 we can't have permission islands. If the user can't view the parent they can't view any children either.
I have not gone though all the steps you have to reproduce, just that statement sort of stood out to me.
Sure:
http://www.langleycom.com/gallery3/index.php/ I have a album called "public" where everybody can view.
Inside that album I have an album called 'Private pictures'. You can't view that album until you log in.
Login with fred/fred and then you will be able to see the 'Private pictures' album.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 4
I tried the same, on my Gallery
http://www.arkimos.ch/gallery3/index.php/
After login (max/max) you can see the album called 'Registered' but you can't see any pictures.
To see this pictures (loged in as max) i have to allow Everybody
Does anyone have any idea?
Posts: 16504
First, you're running on Apache 1.x and that's not supported. Don't know if this issue is related to that or not, but...
http://www.arkimos.ch/gallery3/var/ = forbidden
Post your .htaccess files from your gallery3/var directory and from gallery3/var/albums/Fotos-von-Simone-und-Markus/Registered/
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 4
Ouhh, I think I have to talk with my webhosting provider, 1.x seems to be a little old.
gallery3/var:
*****************************
there is no .htaccess file
*****************************
gallery3/var/albums/Fotos-von-Simone-und-Markus/Registered/:
************************************************************
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule (.*) /gallery3/index.php?kohana_uri=/file_proxy/$1 [L]
</IfModule>
<IfModule !mod_rewrite.c>
Order Deny,Allow
Deny from All
</IfModule>
************************************************************
Posts: 16504
Old, obsoleted, out dated, unsupported, etc
Just for a test, try removing this part from the .htaccess:
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 4
He does not do his homework, and I have to pay for that
I did it (in /gallery3/var/albums/Fotos-von-Simone-und-Markus/Registered )
but no change in behavior
Posts: 16504
Can you post a link to phpinfo:
FAQ: How do I create a phpinfo page?
I'd also try enabling the rewrite rules under .htaccess under gallery3/ There are some lines you'll need to uncomment there, the .htaccess has examples. Ask if you have questions.
____________________________________________
Like Gallery? Like the support? Donate now!
Posts: 27300
I dont see an extra album.
Al is se is the "foot....." album of the mountain.
Dave
____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
If I don't log in, I only see the 'Mountain' Album. If you log in as max/max you can see 'Mountain Album' and the 'Registered' Album. That is exactly the core of the problem. How can you enable the 'Registered' Album to be viewed by the Registered Users only?
Posts: 27300
OK that is by design as you have changed permissions on the Registered album.
So far so good as the 'Registered' album has permissions for the Registered user and the 'Mountain' Album is also view-able because the max user is a everybody user as well.
The guest user can't see the 'Registered' album so don't understand the issue.
There is no way to make a public/guest album invisible to other users.
I need a better user story to understand what you are after.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
Ok. We are getting somewhere
So here is the problem. If you login as max/max, even then you cannot see the album/pictures. You just see broken links.
What I'd like to achieve is that I'd like to make sure that 'Registered' album is viewed by max ONLY and 'Regsitered1' album is viewed by max1 only.
Posts: 81
Dave, did you have a chance to look at that?
Posts: 27300
Then I guess you need to edit permissions on the 'Registered' album so that the max group can view it and not the max1 group.
Then you need to edit the permissions on the 'Registered1' album so that the max1 group can view it and not the max group.
Yes the permissions are limited in the groups and we are aware of that and will be addressing it in the future.
See some notes we took at the last meetup: http://gallery.menalto.com/gallery/doc-images/gcon2011/
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
Dave, that does not work.
First, you cannot associate album permission per group. It does not let you do that. If I go back to what you explained, you cannot do islands.
Currently I have "Registered1" assigned to max1 group only. If I login as max, I can still see "Registered1" album, because I have 'Allow' to 'Everybody'...and max is part of 'Everybody'. Additionally, if I want to grant 'View' to max for "Registered", it skews the grants of "Registered1" too for some reason.
So what you suggest does not work. Even if I have "Registered" and "Registered1" not granted to anybody, I can still see either album, regardless if I am logged in as max or max1. I presume again this is the case because of "Everybody" has permission to these albums. If I disable "Everybody" than this escalates and the entire gallery is skewed. Goes back to your point that you need "Everybody".
So net-net as you pointed, permissions don't work at all.
Posts: 27300
OK! I give up! the permissions system does not work!
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
I am trying to help triage the issue. I saw the pictures with the ideas and I am not sure if I should comment on this here or not. I wish I knew the product better, thou, in any case I'd be happy to provide any help I can to make it work and make it better.
Let me know.
Do you know if I can make the entire gallery requiring a login to access the albums?
Posts: 27300
like http://www.langleycom.com/gallery3/index.php/
then you can login is fred/fred
is that what you are after?
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 81
Dave, yes. Until the permissions are fixed, that's what I'd like to achieve. How can I do that?
Another question - how did you make the <New> tag above the picture?
Thanks!
Posts: 81
Also, from what I can see, You can see the name, owner and the # of views only when you point to the pictures. This is pretty nice too. Is this a module?
Posts: 27300
All it did was set permission for the root album. No extra coding or anything... so it look like:
[img]http://gallery.menalto.com/files/root_permissions.png[/img]
The new item module:
http://codex.gallery2.org/Gallery3:Modules:newitem
I am working on version 2 to position/rotate the text. stay tuned.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team