Shutterfly printing with protected albums

smind

Joined: 2004-03-13
Posts: 5
Posted: Sun, 2005-10-23 05:46

I have excluded "everyone" from my albums' permissions, so that only registered users can see my stuff.

How can I enable shutterfly printing in this situation? Shutterfly's systems can't get to my pictures to print them.

Thanks.
 
fryfrog

Joined: 2002-10-30
Posts: 3236
Posted: Sun, 2005-10-23 08:25

Could you go into exact detail of your permissions setup, so I could try duplicating it? Include how you test the printing also. I have never tried this, so I (and everyone else) will need to know how to test it.

I *imagine* there has to be some way (and maybe it already does this?) of sending your Session ID along with the URL to the images, thus letting shutterfly fetch them and G2 will know its the user. Have you tested it? It sounds like you have.
_________________________________
Support & Documentation || Donate to Gallery || My Website
 
fryfrog

Joined: 2002-10-30
Posts: 3236
Posted: Sun, 2005-10-23 08:50

As I was thinking about it, I remembered that G2 is highly restrictive about session usage by a system that isn't your browser/pc. Of course, this is smart and prevents the high-jacking... but I think it would also prevent the solution mentioned above. I would try changing the allowed IP to shutterfly's, though I think it should also be possible to add it to the list with the html validator. Or open yourself wide open.

If that still doesn't work, we can dig even deeper.

Please post as much extra info as you can, a test album with a test user/pass might also be a good idea, but *only* PM it to a person that says they can help you out (ideally, you'd pick someone with a lot of posts too probably). If you PM me, I might be able to take a look at it.

fryfrog's config.php wrote:
/*
* Allow a particular IP address to access the session (it still must know the
* session id) even though it doesn't match the address/user agent that created
* the session. Put the address of validator.w3.org ('128.30.52.13') here to allow
* validation of non-public Gallery pages from the links at the bottom of the page.
*/
$gallery->setConfig('allowSessionAccess', '128.30.52.13');

_________________________________
Support & Documentation || Donate to Gallery || My Website
 
valiant

Joined: 2003-01-04
Posts: 32509
Posted: Sun, 2005-10-23 13:34

does this bug apply?
[G2] Can't print non-public photos
http://sourceforge.net/tracker/index.php?func=detail&aid=1230447&group_id=7130&atid=107130

btw: one can vote for bugs too, on http://gallery.menalto.com/sfvote/
 
smind

Joined: 2004-03-13
Posts: 5
Posted: Mon, 2005-10-24 01:23

Thanks for the responses. I've done some testing today: The album I'm testing on has permissions set as follows: "Registered Users" has "view all versions" and "view comments". Otherwise, only the owner, me, has access. "Everyone" has been removed from all permissions.

I order a print via shutterfly, and the thumbnail appears normally on the shutterfly page. The order is placed, and I watch my logs. After an hour or so, shutterfly hits the server a few times with this:

64.74.142.210 - - [23/Oct/2005:17:22:30 -0700] "GET /gallery/main.php?g2_view=core.DownloadItem&g2_itemId=11124&g2_GALLERYSID=dfd3ec26faf2dfcdc179aa7a62de1444 HTTP/1.0" 200 2013 "-" "CVP2ImageLib"

It keeps trying every hour or so.

When I plug in that URL to my browser (the same PC used to place the order), the full-res JPG appears. Same if I load the URL in a browser on the server itself. However, if I go to another computer off-site, the same URL results instead in the following error page:

[b]
Error

An error has occurred.

Back to the Gallery

Error Detail +

Error (ERROR_PERMISSION_DENIED) :
* in modules/core/classes/helpers/GalleryUserHelper_simple.class at line 67 (gallerystatus::error)
* in modules/core/classes/GalleryCoreApi.class at line 447 (galleryuserhelper_simple::asserthasitempermission)
* in modules/core/DownloadItem.inc at line 122 (gallerycoreapi::asserthasitempermission)
* in modules/core/DownloadItem.inc at line 91 (downloaditemview::_sendfile)
* in main.php at line 279 (downloaditemview::renderimmediate)
* in main.php at line 87
* in main.php at line 80

My server is running Gallery 2.0.1 on Apache 2.0.52_4 with PHP 4.3.10, under FreeBSD 5.4.

Please let me know if there's anything further I can provide. Thanks.
 
valiant

Joined: 2003-01-04
Posts: 32509
Posted: Mon, 2005-10-24 09:38
Quote:
When I plug in that URL to my browser (the same PC used to place the order), the full-res JPG appears. Same if I load the URL in a browser on the server itself. However, if I go to another computer off-site, the same URL results instead in the following error page:

Quote:
"Everyone" has been removed from all permissions.

so the bug applies. thus it's a known bug / issue.
no further information required.
feel free to vote on http://gallery.menalto.com/sfvote/ for fixing this bug.