Feature Request: Advanced Permissions
|
joshc
Joined: 2010-01-03
Posts: 25 |
Posted: Wed, 2010-04-28 20:05
|
|
I understand that the current permission options are adequate for most of the Gallery 3 installations out there: Admin and Public. However, the permissions options are inadequate for collaboration. Therefore, I do not recommend changing the default permission options, but it would be very helpful if I could toggle on "Advanced Permissions". I am not sure how to articulate what options I would like, so I am just going to describe what I would like to do with the site. I would like to set up a photo collaboration website where people can upload photos relative to a particular event (For example, I would like to have my friends upload their pictures in “My Wedding” album). I would like to be able to create a group that I would permit to create albums, add photos, edit and delete only the photos they uploaded, add tags to any photo, and organize albums. I do not want anybody but Admins to be able to change permissions on the album. Current permissions only allow for an “all or nothing” setting, with the exception of letting people add photos. However, people are currently unable to edit or delete the pictures they upload if they’re only able to “add”. Thanks! JoshC |
|
Posts: 28
I agree this functionality would be great to have in Gallery 3. As it stands Gallery 3 is much improved on 2 but without changes to the permissions like this is not going to be fit for all but the most basic of sites
Posts: 25960
I think this functionality will have to come from the community. We had long discussions at GalleryCon 09 about permissions. It very difficult to get such functionality right for everybody and will affect performance and other aspects including usability.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 1
I agree that this would be a great functionality - I'm currently setting up Gallery3 for an artist collective website, and it would be great to allow full editing permissions for each artist only for their own album section, and limited permissions for other areas, would also be good to have the option of add photos but not albums or only edit photo poted by user etc.
might alo be a good functionality to be able to put different limits on file size for different users/albums
another useful feature would to be able to have a public access "photodump" where non registered users could upload contibuted photos, which would be out of view until sorted by admin.
Cheers
Dillon
Posts: 25
I am not a programmer, so I do not know how difficult this would be to implement.
I believe that it would be a good start if you could create a group where you can toggle each Photo and Album Option individually (Delete Photo, Choose as Album Cover, Edit Photo, Organize Album, Move to Another Album, Permissions, etc.) These options would be site-wide, but a good start.
Alternatively, it would be helpful if you could create a Standard Permission Table for an Album Owner and another Standard Permission Table for an Album Contributor. Then, you could assign Ownership, Contributorship, and Viewing rights at the Album level.
From Floridave's comment, I assume that the Gallery Devs don't want to jump back into this permissions argument on the heels of RC2. However, now that more people are using the software, if any Module devs want to open a discussion about how to handle advanced permissions, I would like to contribute to the discussion.
Posts: 16
Nevertheless, there should be permissions on images as well. As of now permissions are set on albums only. I'd like to set permissions on a particular image.
Also, permissions to see blocks (modules) on the sidebar. If my gallery is private I don't want a guest user to see all the available tags on the sidebar.
Posts: 25960
Use G2. I think this would be better siuted for a different module in G3 than lumping this into a permissions section.
@permissions:
Most devs, core team or none core team have coding skills but the UI skills are low. So a html mockup of how this should work goes a long way.
what about performance considerations?
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 25
@size limits:
I agree that this would be a good separate module that should not be included in any Permissions module. I picture this module adding an Option in the Folder Options pull-up menu (for Admins) that says something like "Set Maximum Album Size". A little window could pop out where you can enter a maximum album size by MB or number of Pictures. This module should not affect performance at all because Gallery would only have to query the maximum album size whenever someone tries to upload into that Album.
@permissions:
Since Gallery already checks for permissions to view albums, I do not see performance being affected any more than it currently is if you fine-tune some more permissions. If it has to query each individual picture, however, I could see that potentially become a drag. But IIRC, Gallery currently allows you to set permissions on individual pictures, so maybe it wouldn't be any bigger drag than it currently is. I'll think about this some more and try to come up with a mock-up this weekend, but if anyone with better coding skills than me (and that would be pretty much anybody) wants to jump on in, let me know and I'd be happy to contribute.
Josh
Posts: 25960
Presently in G3 we just check the album level with a .htaccess so apache does this and is quite fast. If you want the check each item then we get into a issue like we had in G2 where we needed a image firewall to check permissions through the DB and php. This was a huge performance hit. That is why we went with the .htaccess method.
If you offer single image security then you *have* to do a check, if you don't then what is the use of permissions if you are not going to check them?
not in G3. G2 did though an imege firewall. In G3 we check the album with a .htaccess file (much faster).
Remember you can't have security though obscurity.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 1555
Not familiar with G3 but whatever permission setup is used for an album can be adapted for an image although you will obviously have to copy and edit it manually.
--
dakanji.com
Posts: 25
I thought that I remembered that on my "homepage" I was able to edit the permissions of single pictures I put there, but you're obviously right, Dave.
I like the .htaccess method. It is indeed quick and I would be totally fine with permissions only editable at the album level.
Posts: 25960
See our quandary?
joshec, says 'I would be totally fine with permissions only editable at the album level.'
while
kuber says: 'there should be permissions on images as well.'
I will leave it up to the community to come up with a solution since we gave a very good product that is extend-able to various users requirements.
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 4
Hello guys! You make great works!!
Please tell me how to allow all registered users add tags to any photo.
I cant find information about it.
Thanks.
PS I use version gallery3 RC1.
Posts: 16503
Right now they need edit permissions to add tags. If that's functionality you need right now, I can only suggest either write an "advanced permissions" module or use G2.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Posts: 4
I see.
I turn "edit" on and now all registered users can add tags BUT they can delete photos too. It's not write.
I think functions
edit, delete, add tags
must be in different options.
PS Sorry for my maybe bad english.