bug found?

easi

Joined: 2009-02-14
Posts: 3
Posted: Sat, 2009-02-14 10:20

Hi,
I have found that if you create new user 'dummy' with no permissions (after login you get security violation), there is no way how to log you (to log in as admin and add permissions). I'm using Galerry 2.2:

Gallery version = 2.2.4 core 1.2.0.6
PHP version = 5.2.4-2ubuntu5.4 apache2handler
Webserver = Apache/2.2.8 (Ubuntu) PHP/5.2.4-2ubuntu5.4 with Suhosin-Patch
Database = mysqli 5.0.51a-3ubuntu5.4, lock.system=flock
Toolkits = ArchiveUpload, Dcraw, Exif, Getid3, ImageMagick, LinkItemToolkit, SquareThumb, Thumbnail
Acceleration = none, none
Operating system = Linux kremilek 2.6.24-23-generic #1 SMP Thu Nov 27 18:44:42 UTC 2008 i686
Default theme = matrix
gettext = enabled
Locale = cs_CZ
Browser = Mozilla/5.0 (X11; U; Linux i686; cs-CZ; rv:1.9.0.6) Gecko/2009020911 Ubuntu/8.04 (hardy) Firefox/3.0.6

As workaround you have to start another opera session and from this session login as admin and add permissions.

To fix this I suggest:
1) add logout button to security violation
or
2) automatically close session when security violation is found.

Cheers,
easi
 
alecmyers

Joined: 2006-08-01
Posts: 4342
Posted: Sat, 2009-02-14 11:13

Great, but:

there's not a lot of point reporting bugs in a version of Gallery that's about a year out of date - current version is 2.3.
Also please direct verified bug reports to the sourceforge bug tracker:
http://sourceforge.net/tracker/?atid=107130&group_id=7130&func=browse

Thanks!