add new user fails

I cannot add a user.
When I enter a new user name in the box at admin-users it returns a form with the details of the administrator (thats me) with on top in a pink block "password may not be empty!"

I cannot get some kind of form for entering newuser details.

Zenphoto version 1.5.7 (Official build)
PHP version: 7.3.27-1~deb10u1
MySQLi version: 5.5.5
Server software: Apache/2.4.38 (Raspbian)

In admin-assignments the "newuser" entry is checked. (not sure whether thats relevant)

I have a few photo albums loaded and these work fine when I login as admin user.

This is my first attempt using Zenphoto. What did I miss??
Thanks for helping

Comments

  • acrylian Administrator, Developer
    edited April 2021

    The page should look like this:
    https://www.zenphoto.org/screenshots/zenphoto-admin/users.jpg.html

    When you enter a name on "New User" the expands to set the user details:
    https://www.zenphoto.org/screenshots/zenphoto-admin/user-new.jpg.html

  • jwevd Member

    Thanks for the swift replying.
    I did not get the second page you mention.
    However, I switched on my browsers console and saw the error message: "Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”)."
    So I swirched that off in my browser (Firefox, about:config, security.csp.enable to false).
    Now everithing works but it feels like compromising security.
    Cheers

  • acrylian Administrator, Developer

    I never got this security policy issue but will review that.

  • jwevd Member

    The solution did not work on Android, however:
    I remembered that I had a comparable problem with Nextcloud. So I added the same exception to csp in my apache2 virtualhost:

    Header unset Content-Security-Policy
    Header set Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src data:; img-src 'self' data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'"

    Again it feels like compomising security

    Now all buttons like Slideshow work as expected too!!

    Thanks for making this software.

Sign In or Register to comment.