Normal user redirects not working same as admin

Jase

Joined: 2003-07-18
Posts: 15
Posted: Wed, 2006-04-12 02:41

The following information is required to get an answer:
Get this information from the PHP diagnostic (in the configuration wizard).
Gallery URL (optional but very useful):
Gallery version: 1.5.3
Apache version: 2.0.54
PHP version (don't just say PHP 4, please): 4.4.0
Graphics Toolkit: NetPBM
Operating system: Linux 2.6
Web browser/version (if applicable): Firefox/IE

This is a bit of a funny question as I can't tell you in which version of G1 this problem started happening but here is what the problem is, what I noticed and how I worked around it. I never noticed this issue in the 1.4 code base.

I had a problem with normal users going into a nested album, clicking on the thumb nail and instead of the resized picture coming up, it returned to the thumbnails. The apache log had a 200 then a 302 entry for the hit. I logged on with an account that has admin privs and perform the same action and the action worked as per intended and only got one line (200) in the apache log.

Now this does not happen on all albums and this is why. Photos in the album the test was performed against were under the resize size specified in the configuration. It did not fail on albums with the same permissions having larger than resize pictures committed to it and processed by gallery.

I adjusted the permissions for the album so that loggedin (unpriv) user could see the original pictures and it fixed the issue. But this means I have to check each folder for smaller than resize images and fix each and every folder permission. I do not want to apply this setting to all folders as some images are really hi-res and will cause bandwidth issues.

What was funny was that I could see the images as the unpriv user no worries if I used slideshow before changing any permissions.

Is this just a functionallity change or bug? I want to have flat permissions across the board but I need to have the user experience consistant in each album also.

If any of the developers need to have a look email me at

and I will give you the site and login details.

Thanks in advance,

Jase