Hierarchical Security? Hierarchical Security?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Hierarchical Security?

Started by temisoft, May 10, 2006, 07:08:25 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

temisoft

Greetings

I have used Coppermine in a previous life and was very impressed with it's capabilities. I'm not sure if we can use it for yet another purpose.

What I need to do is to host internally a CMS / Gallery system for each of our customers. They in turn need to set up private areas for each of their customers and to have administrative rights to those areas as well. (Is this making any sense)?

How we see this working is that we would set up a "gallery" for each of our customers and they would administer (as in create users each with their own private albums) so that their customers can only see files that "belong to them".

The files in question will not be just images - in fact there may well be no images at all in some case, but they will include pdf files, word files, spreadsheets etc.

Any suggestions as to whether Coppermine will do this? If not can anyone point me in a better direction?

Thanks and Regards

Nigel.

Joachim Müller

Coppermine is not capable to have "sub-admins" or moderators (although this feature has been requested often before), so the answer is "no, sorry - what you're up to is currently not possible with coppermine".
However, with slight modifications you can accomplish something similar to this:
Currently you can set up coppermine to allow users to have a personal gallery (which they in turn can use to create albums within it and set viewing permissions to existing groups that the overall admin has set up). Additionally (or rather, as an alternative), they can set up a password per album and share the password for that particular album with their friends and family (through email or password hint). Of course they can upload files to the albums they created.
You (as coppermine admin) can allow the filetypes your users are allowed to upload - this is not only limited to pics, but documents like PDFs etc. as well. You should of course make sure that your users can not upload executables or other potentially dangerous stuff like PHP or perl scripts (by default, potentially dangerous file types are disabled anyway if your webserver is set up properly).

I suggest setting up a coppermine test install and then start reading the docs that come with it - should give you an idea of what is possible and what not. You're welcome to search the board as well for ideas on how to set up coppermine to fit your needs (there is for example a hack available that will display an actual preview thumbnail of a pdf instead of the generic pdf icon that is usually displayed as a thumbnail for a pdf).