Home› General support

Multiple users problem: Album permission not evaluated

robsch Member
in General support
I got a problem with multiple users:

Every user should only upload to his own album. So I set up an album for each user and set the user permissions to "Upload" and the correspondant user-album.

But it seems that the permission to the album is ignored: the user can upload to every album (and even make new albums).

How do i stop this?

Comments

  • kagutsuchi Member
    Do your users have the `MANAGE_ALL_ALBUMS` rights? This permission will allow them to upload to anyone's album. Your users should only have `UPLOAD` rights if you only want them to upload to their own album. You may also want to give them `ALBUM` rights to administrate their own album.

    It may also help if you provide us with the exact permissions with which you're having problems.

    http://www.zenphoto.org/2008/07/an-overview-of-zenphoto-users/
  • robsch Member
    Hello Kagutsuchi!

    I didn't give them the MANAGE_ALL_ALBUMS right. Just UPLOAD.
  • robsch Member
    Has anyone a suggestion for me?
  • kagutsuchi Member
    Users should be able to upload to any album only if he has `ADMIN_RIGHTS`, `MANAGE_ALL_ALBUM_RIGHTS`, or if the user has all albums activated in "Managed albums". Otherwise, the user should not be able to do what you're saying. You may want to just double-check your users' permissions if you're still seeing this problem.
  • robsch Member
    I checked it again:

    The user got following rights: Comments, Post comments, Upload, View all, Overview and one (their album) in managed albums.

    Still I can upload to another album (and even make new ones) while using this account.
  • robsch Member
    Any news about my problem?

    Should I report this as a bug?
  • acrylian Administrator, Developer
    Are you using the 1.2.9 release if not please update. If the the problem persists then opening a ticket on the bugtracker is always a good idea. Threads easily get lost.
  • robsch Member
    I opened a ticket on the bugtracker, but it seems to got deleted?!?!
  • acrylian Administrator, Developer
    If you had entered your email on the ticket you would have gotten a mail about that. It is closed because it is fixed in the nightly build.
  • robsch Member
    It works!!!

    Thanks! You guys are great!
  • Unknown
    HaHA! I have already seen the great thing!!!
Sign In or Register to comment.