add new user fails

jwevd

I cannot add a user.
When I enter a new user name in the box at admin-users it returns a form with the details of the administrator (thats me) with on top in a pink block "password may not be empty!"

I cannot get some kind of form for entering newuser details.

Zenphoto version 1.5.7 (Official build)
PHP version: 7.3.27-1~deb10u1
MySQLi version: 5.5.5
Server software: Apache/2.4.38 (Raspbian)

In admin-assignments the "newuser" entry is checked. (not sure whether thats relevant)

I have a few photo albums loaded and these work fine when I login as admin user.

This is my first attempt using Zenphoto. What did I miss??
Thanks for helping

acrylian

The page should look like this:
https://www.zenphoto.org/screenshots/zenphoto-admin/users.jpg.html

When you enter a name on "New User" the expands to set the user details:
https://www.zenphoto.org/screenshots/zenphoto-admin/user-new.jpg.html

jwevd

Thanks for the swift replying.
I did not get the second page you mention.
However, I switched on my browsers console and saw the error message: "Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”)."
So I swirched that off in my browser (Firefox, about:config, security.csp.enable to false).
Now everithing works but it feels like compromising security.
Cheers

acrylian

I never got this security policy issue but will review that.

jwevd

The solution did not work on Android, however:
I remembered that I had a comparable problem with Nextcloud. So I added the same exception to csp in my apache2 virtualhost:

Header unset Content-Security-Policy
Header set Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src data:; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"

Again it feels like compomising security

Now all buttons like Slideshow work as expected too!!

Thanks for making this software.