Having trouble password protecting an album

dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Wed, 2009-11-04 07:41

My objective is to password protect an album such that anyone (including non-logged-in guests) can access it, but only with a password. When I edit the album, in the "Password Protection" section, it says "This item is already password protected.". However, if I go to another browser with no auth (not logged in, no password entered), I can see the items and am not asked for a password.

On the "Edit permissions" page, Everyone can do pretty much everything, including view all versions, but it is my assumption that even with that, one would have to enter the password to access the album. Am I misunderstanding how that all works? I don't think so, because I have another album which has a password that's working correctly, and it has the same permissions for Everybody.

What can I try? Thanks in advance.


Gallery version = 2.2.4 core 1.2.0.6
PHP version = 5.2.6-3ubuntu4.2 apache2handler
Webserver = Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.2 with Suhosin-Patch mod_ssl/2.2.11 OpenSSL/0.9.8g mod_perl/2.0.4 Perl/v5.10.0
Database = mysqli 5.0.75-0ubuntu10.2, lock.system=flock
Toolkits = Dcraw, Exif, Ffmpeg, Getid3, ImageMagick, LinkItemToolkit, NetPBM, Thumbnail, Gd, SquareThumb, ArchiveUpload
Acceleration = none, none
Operating system = Linux janus 2.6.28-16-generic #55-Ubuntu SMP Tue Oct 20 19:48:32 UTC 2009 x86_64
Default theme = matrix
gettext = enabled
Locale = en_US
Browser = Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.3) Gecko/20090910 Ubuntu/9.04 (jaunty) Shiretoko/3.5.3
Rows in GalleryAccessMap table = 55
Rows in GalleryAccessSubscriberMap table = 891
Rows in GalleryUser table = 5
Rows in GalleryItem table = 889
Rows in GalleryAlbumItem table = 40
Rows in GalleryCacheMap table = 0
Login or register to post comments
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 11014
Posted: Wed, 2009-11-04 18:07

I don't know how many albums you have that are password protected, but I'd try uninstalling and reinstalling the password protect module. Not just deactivate, reactivate, but uninstall. It will make any album password protected, not password protected anymore though, so you'd need to change those again.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Login or register to post comments
dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Fri, 2009-11-06 05:28

I have quite a few. If I had some reason to believe that doing all that would work, I might go through with it, but I would hate to do all that and have it not work. Thanks for the suggestion, though.
Login or register to post comments
dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Fri, 2009-11-06 06:14

I just tried to set the password again, and noticed this: It says

Quote:
Set Password
Update permissions
######################################################################
Estimated time remaining: 0:01

and stays there. Clearly something is failing near the end of the process. How can I find out what?
Login or register to post comments
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 11014
Posted: Fri, 2009-11-06 06:25

Ah, now we're getting to the meat of it. This is one major problem with how G2 is put together. Setting all these special permissions on stuff is extremely resource intensive and it can also create quite a performance hit on just the every day use of G2 as well.

How many items (albums and photos together) are under the album you are trying to password protect? I'm betting you're hitting a resource limit on the server. Possibly script execution timeout.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Login or register to post comments
dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Fri, 2009-11-06 07:44

It's about 360 pictures and movies broken up into 6 sub-albums. I tried doing each sub-album separately, and that worked, but then it keeps asking for the password for each sub-album. Non-ideal. But it does mean you're probably on to something.

I also noticed sometimes when I try to set a password on the main album containing the other 6 albums, it says "Changes saved successfully" (followed by the form fields) almost immediately. When it does that, it does not set the password.
I tried clearing the password on the 6 sub-albums then setting it on the parent again, but that didn't work either.

If I wanted to just make this happen, is there a database query I can execute?
Is there a way of finding out what resource is running out?
Or why it returns immediately without doing anything?
Login or register to post comments
dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Fri, 2009-11-06 08:21

If I delete the entire parent album, create a new one, password protect it, then import the child albums and images, will all the imported albums and images be subject to that password?
Would that take less resources, and therefore more likely work?

Thanks.
Login or register to post comments
nivekiam
nivekiam's picture

Joined: 2002-12-10
Posts: 11014
Posted: Sat, 2009-11-07 15:19
Quote:
If I wanted to just make this happen, is there a database query I can execute?

Most likely, but I have no clue what that would be and that could get really complex.

Quote:
If I delete the entire parent album, create a new one, password protect it, then import the child albums and images, will all the imported albums and images be subject to that password?
Would that take less resources, and therefore more likely work?

Instead of deleting the album, you could make a new one and then password protect that, then move the other items into it. I think the albums and passwords would be subject to the password then. It would be worth a test.

As for finding out what resources are being eaten up. I would try a few things to see if they make a difference.

--Upgrade to 2.3 (security and performance enhancements have been done since 2.2.4 which is quite old)

--Uninstall any unused or not needed plugins. I really doubt you need all of these for example and I've highlighted some potential plugins to remove:

Quote:
Toolkits = Dcraw, Exif, Ffmpeg, Getid3, ImageMagick, LinkItemToolkit, NetPBM, Thumbnail, Gd, SquareThumb, ArchiveUpload

And seeing all of those installed makes me believe this was a "one-click-install" type install when you first installed it and there are probably a ton of other plugins that are installed that you don't use.
____________________________________________
Like Gallery? Like the support? Donate now!!! See G2 live here
Login or register to post comments
dj_segfault

Joined: 2009-11-04
Posts: 6
Posted: Sun, 2009-11-08 11:57
Quote:
Instead of deleting the album, you could make a new one and then password protect that, then move the other items into it. I think the albums and passwords would be subject to the password then. It would be worth a test.

That sounds like even more work, since (AFAIK) I would have to move all 350 images one at a time from one to the other. I could do a few just as a test, but since it would take hours to use that technique, finding out whether it would work or not is academic at best.

I'm away on vacation right now (wife asleep in the other room) and don't trust the wifi enough here to do server upgrades through it. When I get back tomorrow I will upgrade to the new version (looks easy enough) and disable unneeded plugins. I guess I was "overzealous" selecting them because I didn't know there was a downside to doing so.

I really appreciate your help. Thanks.
Login or register to post comments