Changes on user rights?

Hello guys. A while ago I said I did not bother most, but I'm having trouble again with the right user management.

Recalling:

In user rights, about one year, simply leave all checkboxes blank and choose the folder that the user might Manager and the user could enter gallery but only in folders checked.

A few months ago I had problems with it and users could not view the gallery, and I was advised to select "view gallery" and "view albums" so that users could access, and it worked after a few days.

Everything was perfect until last week, I had not done more updates to avoid spoiling something that I suffered but had returned to work. And since last week, users can access all folders, even if the user has rights only some marked. Updated with the latest night build, but to no avail, users access all folders as if they had it right, but does not.

I honestly do not even want to bother you occupy your time, but if they believe that something might have happened I'd be very grateful.

Thank you.I

Comments

  • View albums allows users to look at otherwise password protected albums. (More on this is described in the Zenphoto user guide) So users being able to access all albums sounds about right.

    I am not sure I understand you. Did things stop working without your having done an update?
  • Thanks so much for responding.

    Then it happened before I upgrade, so I installed the latest build nighly to see if this fix, but not.

    My galleries are private, so I have no password for each album, but this control by managed albums for each user.

    Here I have a print of the user configuration: http://www.iglow.com.br/zen/zen1.png

    It accesses the gallery but can access all albums even when checked only one album. Until last week, the user could enter only on the album that was checked.

    I have about 6 Zenphoto installations of the server, and it happened all at the same time, and i don't ​​change anything. I did a fresh install on another server and this also happened.
  • Well, if it happened without your changing Zenphoto or any of the admin settings it is pretty hard to figure out what else might have changed. I guess I would check to be sure the gallery is still a private gallery.
  • Yes, is private.

    Sorry, but can u take a look into the admin?

    www.glowpress.com.br/planeta

    your name

    I'm really don't know what happened.. I make some tests but any user with view gallery checked can view all albums....

    Thank you so much!
  • Ok, here is what I think has happened.

    Probably you used to have your first level albums unpublished. Then they changed to published.

    It seems that Zenphoto users are able to view any published album in a private gallery. This is probably the desired behavior.

    So you have a couple of options.

    You can un-publish albums you do not want your users to see.

    You can change from a private gallery to a public one with a password on the gallery and on each album you do not want users to have general access to.
  • Thank you for your attention. Your suggestion worked for public galleries, and, the unpublished albums are not seen by guests.

    Now for the private galleries, I still can not. The question is that I need to have several albums, all published. And some users with specific permissions to view one or another album. I choose this on managed albums tab, and users should see all the covers of the albums of the gallery index, but can only access that is allowed.

    This worked until recently and do not know what happened. Today the user is allowed to see only a few albums, and can access the complete gallery. I'm doing something wrong?

    Tk you so much!
  • Please review the documentation describing the various combinations of password protected and published. Published items are viewaable by all, unpublished items are not shown in menus.

    Users who have managed album rights on an album will be able to see that album even if it is unpublished. Users with edit rights to the album will see unpublished items within the album. (There may be some issues with this unless you are running the 1.4.2 release as there have been extensive security changes in that release.)

    For a private gallery, there are no "password protected" items individually all are protected from "guests" none are protected from "users".
Sign In or Register to comment.