The simpler media website CMS
I have 3 albums. All 3 albums are unpublished. When I create a new user, I give that user access to view a specific album that has not been published. It seemed the perfect solution. The user could only see what I wanted this one to see.
But now it turns out that when users search the images, they search in all albums. Also albums that they do not have access to.
A new user only gets "Albums" permissions: View full size image and "Gallery": View gallery, View search and Send comments. And under "Managed albums": Only a single album with "Show unpublished items".
How can you protect your albums?