Security features

hmitzel

I have asked my agency to allow me to use ZenPhoto on our Intranet. They would like me to provide information on ZenPhoto's security features and also how users know when security patches are available. I have searched the Web site but couldn't find much specific information this. Could someone provide a summary of this information?

sbillard

Find a different agency

Remeber, this is an open sourece project staffed by volunteers. What you see is what you get.

hmitzel

In your opinion, would there be any substantial security risks on an Intranet?

acrylian

We currently don't know of any security risks but we can't of course give any guarantee. Best you try before you set up something big and important (and make sure that your intranet server itself is setup secure). Additional recommended read about access rights: http://www.zenphoto.org/2008/08/troubleshooting-zenphoto/#29

sbillard

If you really mean Intranet, with everything inside the firewall, I would not expect you to see any issues. The only potential vulnerabilities are the zenphoto database and files on the server. I assume your IT department has placed sufficient protections on those to prevent your users from hacking them.

vicki.farmer

Re: link http://www.zenphoto.org/2008/08/troubleshooting-zenphoto/#29 -- when I try to go there, I get a "no posts matched your criteria." Is there an updated link for this?

acrylian

There is a link to our user guide on our site's navigation where you will find the troubleshooting article....