security & guest access
|
sunadrad
Joined: 2005-06-06
Posts: 3 |
Posted: Sun, 2005-11-27 04:29
|
|
I'm setting up a private gallery site for friends and family. I don't want to have anonymous/unauthenticated guest access, so I know I should only give permissions to "Registered Users". I also like being able to see the albums I'm working on in "guest display mode" (clicking on "guest" in the lower right corner of an album page). This, however, requires that I give guest at least "view item" permissions. A few questions about this: 1. Can I achieve this by removing guest access to the top-level album but granting guest access to subalbums? 2. If so, does this mean that if someone could guess the URL of a subalbum, then they could then view it with guest access? 3. Anything else I should know/understand about permissions to have only authenticated access to my gallery? (Right now, I'm using .htaccess to restrict access, but I want to get rid of this before I go public so people don't have to log in twice. I can't have everyone use guest access (restricted by .htaccess login) because I'll set it up so that, for example, friends can see all my photos but they can't see the photos my family uploads.) thanks, -s |
|
Posts: 16504
If you want to remove Guest access, why do you want to view it as a "guest"? BTW, that "guest" view is not 100% perfect and only gives a rough estimate of what that guest would see.
But to answer you questions:
@1, yes
@2, yes
@3, you seem to have a good understanding of it. If you don't want guests to view anything remove the Everybody group from being able to view anything.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here