Album change notification vs login
|
brana
Joined: 2009-09-24
Posts: 2 |
Posted: Thu, 2009-09-24 20:38
|
|
When I receive by email an album change notification : Does anyone know what causes the problem ? Is it possible to show the login form instead of the error page ? Regards, |
|
| Login or register to post comments |
Posts: 17361
As a non logged in user do you have permissions to view the album?
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 2
Hello Dave,
No, the album is not public, only members of a defined group can show it.
Therefore, the login form should be displayed instead of an error form, shouldn't it ?
Regards,
Bruno
Posts: 17361
The behavior should be a 404. That is a work in progress.
This is a security issue... we don't want to let the user know that an item does exist ( give a login ) or does not exsist ( 404 ).
What should the behavior be? What if a user has a url to a item that does not exist? Should we show a login or a file not found ( 404 ) or some other behavior?
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team
Posts: 128
My take on this is it is fine to show the login first. After all, the system has already sent the email indicating the items presence to the email address that is on record.
Unless I completely mis-understand the original request!
Martyn T. Griffin
Posts: 17361
http://sourceforge.net/apps/trac/gallery/ticket/603
Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team