I have come across another issue with me under standing permissions. I have two primary albums and each has at least one subalbum. I have setup one group to have access to one album and the other to another album. I have something set in the permissions of the group, that still allows the group to see both albums even though under managed albums it is not selected. Not sure what I have selected that is doing it but any help would be appreciated.

Please see if you can find the answer here: http://www.zenphoto.org/news/an-overview-of-zenphoto-users/

Unfortunately that didn't help. What I figured out though is that when I set the album to be published automatically, this allowed other users to see the albums by default even though the gallery was private. I am good now that I have removed the published option from all of the albums and subalbums.

Quote:What I figured out though is that when I set the album to be published automatically, this allowed other users to see the albums by default even though the gallery was private.
Just to avoid confusion of terms: Gallery = Zenphoto site, album = well, album, e.g. collection of images and/or further subalbums.

If the gallery (site) is private no one except with rights should be able to see. Otherwise anything that is published and not protected is public viewable. Anything that is unpublished but not protected is viewable if you know the link to it.

Just adding albums or other items to the managed items list does not protect anything, it's just about editing on the backend, not viewing on the front end.

If you still think there is anything wrong, we will need detailed info what you set to each group and how the albums are setup so we can try to reproduce it.