Pemission and Thumbnail

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Mon, 2009-08-10 15:07

I removed the permission from everybody and only registered users were given permission, after doing this the Thumbnails doesn't appear on the page. Enabling the permission of Everybody brings the thumbnails back. Does anybody have any clue about it?

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Mon, 2009-08-10 15:55

Please upgrade to an experimental version:
http://codex.gallery2.org/Gallery3:FAQ#How_do_I_upgrade.3F

post a screen shot of your permissions dialog.
Permissions are on a per album basis not per item.

Dave

_____________________________________________
Blog & G2 || floridave - Gallery Team FAQ: I get an error 500 when I visit my Gallery 3 install for the first time

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Mon, 2009-08-10 21:25

Hi Dave,
Thanks for prompt reply. I removed the complete gallery3 and instead of updating I installed the experimental version a fresh.
The problem still persists. The image of the permission could be found at http://soham.net16.net/index.html
Samir

Jase

Joined: 2003-07-18
Posts: 15

Posted: Mon, 2009-08-10 21:59

This is the same issue I am having as listed in this thread http://gallery.menalto.com/node/90070 . I will be interested to see the outcome here.

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Mon, 2009-08-10 23:50

Please give me step by step instructions on how to reproduce this issue.
Start with:
Install G3
add album
add photo(s)
create group
create user
add user to the xx group

....
Except give specific directions as I can't reproduce this issue

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Tue, 2009-08-11 00:09

I can't seem to reproduce this issue.
Here is my test gallery:
http://gallery2.ca/gallery3/index.php/
See there is no albums
now login as
malisa / malisa
See the album that I had set for only registered users to view & view full sized all other action disallowed.

Is that not the behavior you see? If not show an example.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

Jase

Joined: 2003-07-18
Posts: 15

Posted: Tue, 2009-08-11 00:20

Thanks for reply Dave. There seems to be an issue with logging in with that id and password.

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Tue, 2009-08-11 01:29

Sorry try again. I was working on a different G3 at the time.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

Jase

Joined: 2003-07-18
Posts: 15

Posted: Tue, 2009-08-11 01:31

Hi Dave,

Yours works as intended. Mine is Beta 2, Was this a bug between beta 2 and the git version you are using? I PM'd you details on my gallery so you can see the issue with the beta 2 that I have running.

Cheers,

Jason

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Tue, 2009-08-11 01:50

http://codex.gallery2.org/Gallery3:Upgrading
are you using Apache 1.x ?

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

Jase

Joined: 2003-07-18
Posts: 15

Posted: Tue, 2009-08-11 01:57

Yeap, I followed the Upgrading document and ran index.php/upgrader as said by the instructions.

Apache and php versions are:

Apache version 2.2.9 (Linux)
PHP version 5.2.6

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Tue, 2009-08-11 04:31

please post the .htaccess files in the /gallery3/var/albums and gallery3/var/thumbs/Hidden_albumname

I think it might be related to:
http://forum.kohanaphp.com/comments.php?DiscussionID=1245

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Tue, 2009-08-11 10:00

Hi Dave,

Here is what I did.
1. Copied the experimental version given by you above.
2. Caller xxxxxx/installer
3. gave the database details.
4. It gave me admin password.
5. I tried to upload some pictures, it showed me suhosin.session.encrypt error. In .htaccess I added flag, php_flag suhosin.session.encrypt off
6. Also I uncommented the mod_write stuff at the end of the default .htaccess file.
7. Created on album in gallery. Uploaded some pics. Worked fine.
8. I added some new users
9. changed the permission as mentioned above and the thumbnails were gone. Everytime I refresh the page some or other thumbnail disappears. Also the images appear unaligned.

It looks like some of my PHP settings of the server are not compatible.

My album is at
http://www.soham.net16.net/gallery35c
user test
password test

I've uploaded the pictures of the same at http://soham.net16.net/index.html

Similar issue I've found at http://gallery.menalto.com/gallery_3.0_beta_1_released

2. Thumbnail can't be showed correctly. After I check trac, it is the same problem described as ticket #307 http://apps.sourceforge.net/trac/gallery/ticket/307
If disable all permission to everybody group, thumbnails can't be showed even if I've login as administrator. Give everybody group only a 'view' permission, thumbnails show correctly.
Well, while editing permission, the permission dialog has a warning
"Oh no! Your server needs a configuration change in order for you to hide photos! Ask your server administrator to set AllowOverride FileInfo Options to fix this."

But in my case I don't get warning mentioned there.

Thanks and Regards,
Samir

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Tue, 2009-08-11 10:02

Hi Dave,
you can find my phpinfo at
http://soham.net16.net/show.php
Thanks and regards,
Samir

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Tue, 2009-08-11 13:55

Hi Dave,

thanks a tons for you help. It is now working. It seems that /gallery3/var/albums and gallery3/var/thumbs/Hidden_albumname/.htaccess was making some problem.

I deleted this file and it stated working fine. It seems the original generated file makes some problem.

One more small request. Could you please post your htaccess file here? So that I could merge it with mine.

Regards,
Samir

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Tue, 2009-08-11 15:24

Well removing the .htaccess file will negate the security. This is how G3 does security of images and directories ( with .htaccess ) So there must be some configuration issue with Apache or php that is causing this. Starting to get over my head now.

Here is my phpinfo(s):
http://www.langleycom.com/gallery3/phpinfo.php
http://gallery2.ca//gallery3/phpinfo.php

Dave

_____________________________________________
Blog & G2 || floridave - Gallery Team

samirchavan

Joined: 2009-08-10
Posts: 6

Posted: Tue, 2009-08-11 18:30

Could you please explain me the concept used here for security?

I guess over the .htaccess the files are redirected through file_proxy. What is the role of file "gallery3/modules/gallery/controllers/file_proxy.php"?
Does the function from this file gets invoked every time, when the thumbnails are requested?

Samir

nivekiam

Joined: 2002-12-10
Posts: 16503

Posted: Tue, 2009-08-11 18:51

Quote:

I guess over the .htaccess the files are redirected through file_proxy

The .htaccess files have rewrite rules that rewrite requests for albums that have had permissions set on them through the file_proxy.php. The file_proxy.php does the work of checking if that person has permission to view the image. If they do, they see the image.

Quote:

Does the function from this file gets invoked every time, when the thumbnails are requested?

If you set permissions on an album, yes. If not, then there is no .htaccess written, no file_proxy for files to go through, etc.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here

bharat

Joined: 2002-05-21
Posts: 7985

Posted: Thu, 2009-08-13 18:44

If you delete the .htaccess file, you're also disabling your security. So I'd advise against doing that. If you can reproduce the problem and are willing to give me ssh access, I'll be happy to go in and diagnose and fix the actual underlying issue.
---
Problems? Check gallery3/var/logs
bugs/feature req's | upgrade to the latest code | use git | help! vote!

nivekiam

Joined: 2002-12-10
Posts: 16503

Posted: Thu, 2009-08-13 19:10

Let me see what I can do about that because it's on my shared host. I'll test under Apache on my VPS and see if I can replicate, if I can do that there, I'll give you all the access you need.

email or PM better to send you credentials?
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here

ryanmc

Joined: 2006-10-15
Posts: 72

Posted: Mon, 2009-08-24 15:49

bharat wrote:

If you can reproduce the problem and are willing to give me ssh access, I'll be happy to go in and diagnose and fix the actual underlying issue.

Did you ever find a solution for this? I am also having the same problem. I can give you SSH access if you have not already gotten it from someone else.

www.justechn.com

Jase

Joined: 2003-07-18
Posts: 15

Posted: Wed, 2009-08-26 23:21

I have done some further digging on this and the issue appears to be more related around the apache setup but I am yet to figure it out. The access logs get a 404 (not found) on albums that have "everyone denied" and "registered users permitted" permission set (when the .htaccess file has been applied).

The issue is somewhere in the apache configuration differences of a vanilla apache install (what the gallery team are using) and that of a cPanel 11/WHM install (the people that seem to be having this issue, myself included). There is something else to configure, but I can't work out what.

ryanmc

Joined: 2006-10-15
Posts: 72

Posted: Thu, 2009-08-27 19:27

Jase wrote:

The issue is somewhere in the apache configuration differences of a vanilla apache install (what the gallery team are using) and that of a cPanel 11/WHM install (the people that seem to be having this issue, myself included). There is something else to configure, but I can't work out what.

I am also using cpanel at my host.

www.justechn.com

Jase

Joined: 2003-07-18
Posts: 15

Posted: Sun, 2009-08-30 23:57

Ok, I have had some luck in sorting out my issue. It surrounds FastCGI as listed in another thread. FastCGI was the only option that would work with low memory WHM/cPanel VPS hosts. This was due to suPHP not loading because of httpd.conf configuration items:

RLimitMEM
RLimitCPU

Once I remarked these items out and set PHP Configuration back to run as suPHP, all my PHP scripts now run correctly, as the correct user and the Gallery 3 permission run correctly.

floridave

Joined: 2003-12-22
Posts: 25967

Posted: Mon, 2009-08-31 00:00

Thanks for getting back to us on this issue, I will forward the info to one of the developers, so we can handle this unusual occurrence/configuration.

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Mon, 2009-08-10 15:07
	I removed the permission from everybody and only registered users were given permission, after doing this the Thumbnails doesn't appear on the page. Enabling the permission of Everybody brings the thumbnails back. Does anybody have any clue about it?
	XUser login Username: * Password: * Create new account Request new password
floridave Joined: 2003-12-22 Posts: 25967	Posted: Mon, 2009-08-10 15:55
	Please upgrade to an experimental version: http://codex.gallery2.org/Gallery3:FAQ#How_do_I_upgrade.3F post a screen shot of your permissions dialog. Permissions are on a per album basis not per item. Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team FAQ: I get an error 500 when I visit my Gallery 3 install for the first time

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Mon, 2009-08-10 21:25
	Hi Dave, Thanks for prompt reply. I removed the complete gallery3 and instead of updating I installed the experimental version a fresh. The problem still persists. The image of the permission could be found at http://soham.net16.net/index.html Samir

Jase Joined: 2003-07-18 Posts: 15	Posted: Mon, 2009-08-10 21:59
	This is the same issue I am having as listed in this thread http://gallery.menalto.com/node/90070 . I will be interested to see the outcome here.

floridave Joined: 2003-12-22 Posts: 25967	Posted: Mon, 2009-08-10 23:50
	Please give me step by step instructions on how to reproduce this issue. Start with: Install G3 add album add photo(s) create group create user add user to the xx group .... Except give specific directions as I can't reproduce this issue Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

floridave Joined: 2003-12-22 Posts: 25967	Posted: Tue, 2009-08-11 00:09
	I can't seem to reproduce this issue. Here is my test gallery: http://gallery2.ca/gallery3/index.php/ See there is no albums now login as malisa / malisa See the album that I had set for only registered users to view & view full sized all other action disallowed. Is that not the behavior you see? If not show an example. Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

Jase Joined: 2003-07-18 Posts: 15	Posted: Tue, 2009-08-11 00:20
	Thanks for reply Dave. There seems to be an issue with logging in with that id and password.

floridave Joined: 2003-12-22 Posts: 25967	Posted: Tue, 2009-08-11 01:29
	Sorry try again. I was working on a different G3 at the time. Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

Jase Joined: 2003-07-18 Posts: 15	Posted: Tue, 2009-08-11 01:31
	Hi Dave, Yours works as intended. Mine is Beta 2, Was this a bug between beta 2 and the git version you are using? I PM'd you details on my gallery so you can see the issue with the beta 2 that I have running. Cheers, Jason

floridave Joined: 2003-12-22 Posts: 25967	Posted: Tue, 2009-08-11 01:50
	http://codex.gallery2.org/Gallery3:Upgrading are you using Apache 1.x ? Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

Jase Joined: 2003-07-18 Posts: 15	Posted: Tue, 2009-08-11 01:57
	Yeap, I followed the Upgrading document and ran index.php/upgrader as said by the instructions. Apache and php versions are: Apache version 2.2.9 (Linux) PHP version 5.2.6

floridave Joined: 2003-12-22 Posts: 25967	Posted: Tue, 2009-08-11 04:31
	please post the .htaccess files in the /gallery3/var/albums and gallery3/var/thumbs/Hidden_albumname I think it might be related to: http://forum.kohanaphp.com/comments.php?DiscussionID=1245 Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Tue, 2009-08-11 10:00
	Hi Dave, Here is what I did. 1. Copied the experimental version given by you above. 2. Caller xxxxxx/installer 3. gave the database details. 4. It gave me admin password. 5. I tried to upload some pictures, it showed me suhosin.session.encrypt error. In .htaccess I added flag, php_flag suhosin.session.encrypt off 6. Also I uncommented the mod_write stuff at the end of the default .htaccess file. 7. Created on album in gallery. Uploaded some pics. Worked fine. 8. I added some new users 9. changed the permission as mentioned above and the thumbnails were gone. Everytime I refresh the page some or other thumbnail disappears. Also the images appear unaligned. It looks like some of my PHP settings of the server are not compatible. My album is at http://www.soham.net16.net/gallery35c user test password test I've uploaded the pictures of the same at http://soham.net16.net/index.html Similar issue I've found at http://gallery.menalto.com/gallery_3.0_beta_1_released 2. Thumbnail can't be showed correctly. After I check trac, it is the same problem described as ticket #307 http://apps.sourceforge.net/trac/gallery/ticket/307 If disable all permission to everybody group, thumbnails can't be showed even if I've login as administrator. Give everybody group only a 'view' permission, thumbnails show correctly. Well, while editing permission, the permission dialog has a warning "Oh no! Your server needs a configuration change in order for you to hide photos! Ask your server administrator to set AllowOverride FileInfo Options to fix this." But in my case I don't get warning mentioned there. Thanks and Regards, Samir

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Tue, 2009-08-11 10:02
	Hi Dave, you can find my phpinfo at http://soham.net16.net/show.php Thanks and regards, Samir

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Tue, 2009-08-11 13:55
	Hi Dave, thanks a tons for you help. It is now working. It seems that /gallery3/var/albums and gallery3/var/thumbs/Hidden_albumname/.htaccess was making some problem. I deleted this file and it stated working fine. It seems the original generated file makes some problem. One more small request. Could you please post your htaccess file here? So that I could merge it with mine. Regards, Samir

floridave Joined: 2003-12-22 Posts: 25967	Posted: Tue, 2009-08-11 15:24
	Well removing the .htaccess file will negate the security. This is how G3 does security of images and directories ( with .htaccess ) So there must be some configuration issue with Apache or php that is causing this. Starting to get over my head now. Here is my phpinfo(s): http://www.langleycom.com/gallery3/phpinfo.php http://gallery2.ca//gallery3/phpinfo.php Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

samirchavan Joined: 2009-08-10 Posts: 6	Posted: Tue, 2009-08-11 18:30
	Could you please explain me the concept used here for security? I guess over the .htaccess the files are redirected through file_proxy. What is the role of file "gallery3/modules/gallery/controllers/file_proxy.php"? Does the function from this file gets invoked every time, when the thumbnails are requested? Samir

nivekiam Joined: 2002-12-10 Posts: 16503	Posted: Tue, 2009-08-11 18:51
	Quote: I guess over the .htaccess the files are redirected through file_proxy The .htaccess files have rewrite rules that rewrite requests for albums that have had permissions set on them through the file_proxy.php. The file_proxy.php does the work of checking if that person has permission to view the image. If they do, they see the image. Quote: Does the function from this file gets invoked every time, when the thumbnails are requested? If you set permissions on an album, yes. If not, then there is no .htaccess written, no file_proxy for files to go through, etc. ____________________________________________ Like Gallery? Like the support? Donate now!!! See G2 live here

bharat Joined: 2002-05-21 Posts: 7985	Posted: Thu, 2009-08-13 18:44
	If you delete the .htaccess file, you're also disabling your security. So I'd advise against doing that. If you can reproduce the problem and are willing to give me ssh access, I'll be happy to go in and diagnose and fix the actual underlying issue. --- Problems? Check gallery3/var/logs bugs/feature req's \| upgrade to the latest code \| use git \| help! vote!

nivekiam Joined: 2002-12-10 Posts: 16503	Posted: Thu, 2009-08-13 19:10
	Let me see what I can do about that because it's on my shared host. I'll test under Apache on my VPS and see if I can replicate, if I can do that there, I'll give you all the access you need. email or PM better to send you credentials? ____________________________________________ Like Gallery? Like the support? Donate now!!! See G2 live here

ryanmc Joined: 2006-10-15 Posts: 72	Posted: Mon, 2009-08-24 15:49
	bharat wrote: If you can reproduce the problem and are willing to give me ssh access, I'll be happy to go in and diagnose and fix the actual underlying issue. Did you ever find a solution for this? I am also having the same problem. I can give you SSH access if you have not already gotten it from someone else. www.justechn.com

Jase Joined: 2003-07-18 Posts: 15	Posted: Wed, 2009-08-26 23:21
	I have done some further digging on this and the issue appears to be more related around the apache setup but I am yet to figure it out. The access logs get a 404 (not found) on albums that have "everyone denied" and "registered users permitted" permission set (when the .htaccess file has been applied). The issue is somewhere in the apache configuration differences of a vanilla apache install (what the gallery team are using) and that of a cPanel 11/WHM install (the people that seem to be having this issue, myself included). There is something else to configure, but I can't work out what.

ryanmc Joined: 2006-10-15 Posts: 72	Posted: Thu, 2009-08-27 19:27
	Jase wrote: The issue is somewhere in the apache configuration differences of a vanilla apache install (what the gallery team are using) and that of a cPanel 11/WHM install (the people that seem to be having this issue, myself included). There is something else to configure, but I can't work out what. I am also using cpanel at my host. www.justechn.com

Jase Joined: 2003-07-18 Posts: 15	Posted: Sun, 2009-08-30 23:57
	Ok, I have had some luck in sorting out my issue. It surrounds FastCGI as listed in another thread. FastCGI was the only option that would work with low memory WHM/cPanel VPS hosts. This was due to suPHP not loading because of httpd.conf configuration items: RLimitMEM RLimitCPU Once I remarked these items out and set PHP Configuration back to run as suPHP, all my PHP scripts now run correctly, as the correct user and the Gallery 3 permission run correctly.

floridave Joined: 2003-12-22 Posts: 25967	Posted: Mon, 2009-08-31 00:00
	Thanks for getting back to us on this issue, I will forward the info to one of the developers, so we can handle this unusual occurrence/configuration. Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

Pemission and Thumbnail

XUser login