Album change notification vs login

brana

Joined: 2009-09-24
Posts: 2
Posted: Thu, 2009-09-24 20:38

When I receive by email an album change notification :
- if I'm not yet logged in, an error page is displayed
- if I'm already logged in, the album is correctly shown

Does anyone know what causes the problem ?

Is it possible to show the login form instead of the error page ?

Regards,
Bruno
 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 22883
Posted: Thu, 2009-09-24 21:44

As a non logged in user do you have permissions to view the album?

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
 
brana

Joined: 2009-09-24
Posts: 2
Posted: Fri, 2009-09-25 19:02

Hello Dave,

No, the album is not public, only members of a defined group can show it.
Therefore, the login form should be displayed instead of an error form, shouldn't it ?

Regards,
Bruno
 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 22883
Posted: Sat, 2009-09-26 03:39

The behavior should be a 404. That is a work in progress.
This is a security issue... we don't want to let the user know that an item does exist ( give a login ) or does not exsist ( 404 ).
What should the behavior be? What if a user has a url to a item that does not exist? Should we show a login or a file not found ( 404 ) or some other behavior?

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
 
griffinmt
griffinmt's picture

Joined: 2009-09-06
Posts: 128
Posted: Sat, 2009-09-26 19:32

My take on this is it is fine to show the login first. After all, the system has already sent the email indicating the items presence to the email address that is on record.

Unless I completely mis-understand the original request!

Martyn T. Griffin
 
floridave
floridave's picture

Joined: 2003-12-22
Posts: 22883
Posted: Sat, 2009-09-26 19:51

http://sourceforge.net/apps/trac/gallery/ticket/603

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team