permission problem - unable to see home page

nemo2010

Joined: 2006-02-03
Posts: 82
Posted: Thu, 2009-09-10 19:58

I need little help with album permissions, for now I have
main album (20 sub albums)
- user1: view all versions, add to cart
- user2: view all versions, add to cart

One of the albums (album20) is hidden and has the following permissions:
- hidden
- everybody: view all versions, add to cart
- guest: view all versions, add to cart
- user1: view all versions, add to cart
- user2: view all versions, add to cart
-- user3: view all versions, add to cart, add sub-albums, add sub-items

All users can view album20 by going directly to example.com/v/album20. That will allow them to view, and download any pictures. However when user3 logins from the home page, it creates either erroer404 or "Security Violation: The action you attempted is not permitted." When I click on "Back to Gallery" link it is still displays error404 or security violation. When I navigate to .com/v/album20 it works fine, user3 can create new sub-albums and everything works fine.

What do I need to change so user3 can login from home page, and will see album20? I do not want any other unregistered users or guests to see anything unless they know exact URL for hidden albums.

Thank you


Gallery version = 2.3-svn core 1.2.34
API = Core 7.53, Module 3.9, Theme 2.6, Embed 1.4
PHP version = 5.2.9 cgi-fcgi
Webserver = Apache/2.2.13 (Unix) mod_ssl/2.2.13 OpenSSL/0.9.8k DAV/2 mod_auth_passthrough/2.1 FrontPage/5.0.2.2635
Database = mysqli 5.0.81-community-log, lock.system=flock
Toolkits = NetPBM, Gd, Thumbnail, Dcraw, ImageMagick, Exif
Acceleration = none/900, none/1800
Operating system = Linux host.hostmonster.com 2.6.28-10.7.intel.E1000E.BHsmp #1 SMP Thu Aug 13 21:45:18 MDT 2009 x86_64
Default theme = matrix
gettext = enabled
Locale = en_US
Browser = Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 GTB5 (.NET CLR 3.5.30729)
Rows in GalleryAccessMap table = 506
Rows in GalleryAccessSubscriberMap table = 16135
Rows in GalleryUser table = 6
Rows in GalleryItem table = 16128
Rows in GalleryAlbumItem table = 248
Rows in GalleryCacheMap table = 817

 
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 16503
Posted: Thu, 2009-09-10 21:21
Quote:
However when user3 logins from the home page, it creates either erroer404 or "Security Violation: The action you attempted is not permitted."

That's because you don't have anything on the home page they can't view. Create a dummy image or thumb they can view on the main page and the error will go away. Even though they can view album20, since it's hidden they can't see it until they visit it.

Probably the best/easiest thing would be to create a dummy image that all users can view on the main page, you could even set it so they can only "View Item" so they can only see the thumbnail.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here

 
nemo2010

Joined: 2006-02-03
Posts: 82
Posted: Tue, 2009-09-15 21:22

nivekiam,

The only change I had to do was to allow "Everybody" [core] view item, and uncheck apply to sub albums. Now home page can be displayed, the only thing I would like to have is that user3 will see album20 upon logging in. Album20 is hidden and will not appear on the home page unless it is visited first. Can it be displayed?

Thank you

 
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 16503
Posted: Wed, 2009-09-16 04:09

Nope, either unhide it and set permissions accordingly or live with it how it is.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here