security & guest access
|
sunadrad
Joined: 2005-06-06
Posts: 3 |
Posted: Sun, 2005-11-27 04:29
|
|
I'm setting up a private gallery site for friends and family. I don't want to have anonymous/unauthenticated guest access, so I know I should only give permissions to "Registered Users". I also like being able to see the albums I'm working on in "guest display mode" (clicking on "guest" in the lower right corner of an album page). This, however, requires that I give guest at least "view item" permissions. A few questions about this: 1. Can I achieve this by removing guest access to the top-level album but granting guest access to subalbums? 2. If so, does this mean that if someone could guess the URL of a subalbum, then they could then view it with guest access? 3. Anything else I should know/understand about permissions to have only authenticated access to my gallery? (Right now, I'm using .htaccess to restrict access, but I want to get rid of this before I go public so people don't have to log in twice. I can't have everyone use guest access (restricted by .htaccess login) because I'll set it up so that, for example, friends can see all my photos but they can't see the photos my family uploads.) thanks, -s |
|
|
nivekiam
Joined: 2002-12-10
Posts: 16504 |
Posted: Sun, 2005-11-27 06:51
|
|
If you want to remove Guest access, why do you want to view it as a "guest"? BTW, that "guest" view is not 100% perfect and only gives a rough estimate of what that guest would see. But to answer you questions: |
|
