Permission problems in 3.0.3

Winddancer

Joined: 2012-05-04
Posts: 14
Posted: Wed, 2012-05-09 14:22

Hi all,

I am having some permission problems with a 3.0.3 installation. I added several groups and each group shall receive its' own album.

Until now I only had one user group which had access to all albums. (which worked perfectly well)

When I am now trying to change album permissions, I change permissions for ALL albums. Which is definetly wrong.

eg.
I got 3 albums:
People, animals, Rural

Each album has rights set to "press users" view and view full size image.

Now I would like to add a group named "people users" to the album "people".

When I change that permission I also change it for animals and rural.

As I've been working with gallery for quite some time now (from version 1 +), I never encountered this issue before.

Does anyone recognize this problem!?

kind regards

Sven

 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 25965
Posted: Sun, 2012-05-13 22:32
Quote:
When I am now trying to change album permissions, I change permissions for ALL albums. Which is definetly wrong.

I bet you are changing permissions on the parent album. Go into the album you want to edit permission on and edit the permissions there.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

 
Winddancer

Joined: 2012-05-04
Posts: 14
Posted: Mon, 2012-05-14 09:31

I tried that already. Unfortunately the result is exactly the same... :(

 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 25965
Posted: Mon, 2012-05-14 13:41

Seems to work for me so I will let other community members try and see.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

 
Winddancer

Joined: 2012-05-04
Posts: 14
Posted: Tue, 2012-05-15 14:24

which version are you using?

 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 25965
Posted: Tue, 2012-05-15 22:26

3.0.3

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

 
poemgv

Joined: 2012-07-05
Posts: 7
Posted: Thu, 2012-07-05 23:33

Having resolved 'rewrite and AllowOverride' error in the permissions window (and posted my fix) I think I have the same issue as this. At first I did not realise that the 'lock' icon in the permissions window (top line)refers to the parent album but still the changes I make to one album/group seem to impact on other albums/groups. I have been searching for a guide on setting permissions with no luck so far.

My Versions

Quote:
Version: 3.0.4 (Ricochet)
Operating system: Linux 3.0.0-22-server
Apache: Apache/2.2.20 (Ubuntu)
PHP: 5.3.6-13ubuntu3.8
MySQL: 5.1.63-0ubuntu0.11.10.1
Server load: 0.77 0.59 0.57
Graphics toolkit: imagemagick

All my albums are in an Album called 'Albums'

$ ls /var/www/gallery3/var/albums -la

Quote:
total 32
drwxr-xr-x 7 www-data www-data 4096 2012-07-05 22:12 .
drwxrwxrwx 9 root root 4096 2012-07-05 22:28 ..
drwxr-xr-x 5 www-data www-data 4096 2012-07-05 22:25 AM-Albums
drwxr-xr-x 3 www-data www-data 4096 2012-07-05 21:04 Carls-Albums
drwxr-xr-x 3 www-data www-data 4096 2012-07-03 17:33 Family-Days
drwxr-xr-x 10 www-data www-data 4096 2012-07-05 15:45 Gerrys-Albums
-rw-r--r-- 1 www-data www-data 198 2012-07-05 14:43 .htaccess

e.g. of sub album (not sure if this is referred to as child or grandchild)
ls /var/www/gallery3/var/albums/Carls-Albums -la

Quote:
total 12
drwxr-xr-x 3 www-data www-data 4096 2012-07-05 21:04 .
drwxr-xr-x 7 www-data www-data 4096 2012-07-05 22:12 ..
drwxr-xr-x 2 www-data www-data 4096 2012-07-05 21:03 2004-09

When I set it so user AM can view the AM Albums I inadvertently seem be be blocking other users previously set to view their albums (example user Gerry can no longer view his albums under 'Gerrys-Albums')

My questions
1> I cant remember the install routine and am I'm wondering if I made a mistake by setting just one parent 'Albums'
2> Should I be able to set another album (based on owner) at the same level as 'Albums'? (Can't see how to do this 'add album always creates under 'Album' or the open child)
3> Is there a detailed description for setting the permissions so users can only see albums with group attribute they belong to? (I have searched and still looking for one)

I would appreciate any assistance

 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 25965
Posted: Fri, 2012-07-06 00:26
Quote:
1> I cant remember the install routine and am I'm wondering if I made a mistake by setting just one parent 'Albums'

Could be. You can't have 'island' of permissions. The user with permissions of one album must and will have permissions for all the parents as well.

Quote:
2> Should I be able to set another album (based on owner) at the same level as 'Albums'? (Can't see how to do this 'add album always creates under 'Album' or the open child)

Just go to the parent album and create another album. When you create an album we assume you want to add stuff to it so we take you to the new album you just created.

Quote:
3> Is there a detailed description for setting the permissions so users can only see albums with group attribute they belong to? (I have searched and still looking for one)

http://codex.gallery2.org/Gallery3:User_guide:Gallery3:Permissions_and_security
If you want you can contribute some details for others to benefit.

Dave

_____________________________________________
Blog & G2 || floridave - Gallery Team

 
poemgv

Joined: 2012-07-05
Posts: 7
Posted: Sat, 2012-07-07 01:48

Thanks for the response floridave.

Quote:
The user with permissions of one album must and will have permissions for all the parents as well.

Sorry if I being a bit stupid but I want to be sure I am not trying to achieve the impossible as I did come across where others seem to be saying something similar about permissions.

I want to limit user access to specific albums based on groups that the users belong to (I think I understand the islands issue and think I am avoiding it) but ultimately it seems I have the same parent album for everything because anytime I modify one album's settings it affects albums in a seperate group.

What I've done so far...
I cleared everything out (deleted directories - everything from /galleries/... and under, and dropped the sql schema). Then reinstalled - everything went without a hitch and everything seems to work properly except permissions. I can add albums photos users groups and downloaded modules etc The only thing that bothers me a bit about the re-install is that Gallery picked up and activated ImageMagick engine without my intervention. I'm guessing that is normal if it detects the engine already installed on the system?
.
.
.
.

Quote:
Just go to the parent album and create another album. When you create an album we assume you want to add stuff to it so we take you to the new album you just created.

Works like a charm!
.
.
.
.

Quote:
If you want you can contribute some details for others to benefit.

I would be more than happy to contribute (as a Linux user with some experience). I have already started to put together a document that traces my steps for install/re-install on Ubuntu 11.10 home server but probably no point in submitting if I have done something that is causing this problem. See draft so far here

I must be misunderstanding how permissions work -is there any further assistance you (or anyone) can provide?

Peter

 
poemgv

Joined: 2012-07-05
Posts: 7
Posted: Sat, 2012-07-07 14:21
Quote:
I must be misunderstanding how permissions work

STOP PRESS! I was misunderstanding... and it looks like I can get it working the way I want.

When I have investigated further I will post back.

 
poemgv

Joined: 2012-07-05
Posts: 7
Posted: Wed, 2012-07-11 14:22

Ok I have spent a few hours 'playing' with it and all now working as I want it.

My mistake was 'messing' with the 'lock' at parent level. As I see it, each group should have its own parent album at the highest level (i.e. the group's parent should be visible to admin on initial login)

Thanks again for your response Dave.

My intention is to complete the document I started on how to install Gallery3 on Ubuntu Home Server and post it in the next week or two.

 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 25965
Posted: Wed, 2012-07-11 18:30
Quote:
My intention is to complete the document I started on how to install Gallery3 on Ubuntu Home Server and post it in the next week or two.

Great! Looking forward to it.
Would be nice if you could clarify the docs for the permissions as well, so it benefits the community as a whole.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team