Album Private has a bug Album Private has a bug
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Album Private has a bug

Started by luizccm, July 13, 2006, 10:09:26 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

luizccm

Hi,
I believe that there is a serious deficiency in the system, related to the private album, as described below:
1 - Usually the images of album private need not to be approved by the manager, because they get restricted that users and your guests.

2 - But to have an album private, the user needs to create an album public, and with that this album also does not have her images approved by the manager, but these images of this album pass the being seen in main Page of the gallery!! Any image that is prohibited for a gallery publishes and  family,  it ca not be allowed without  manager's permission.

3 - The public album of the gallery private should follow the same permission configuration that is defined in the group for the public albums, and to do not follow the one of the album private to avoid that that happens.
  Thanks,
  Luiz ::)

Stramm

I'm not quite sure if I fully understand... can you rephrase your statements

luizccm

#2
Hi,
I am using a translator to translate the text of Portuguese-br for English, but I go to try again! When an user creates privative its album, and in the configuration of the group he was allowed that it placed photos without approval of the administrator. All the photos that this user to place in its album that he is not privative, the photos go to be shown in main page of the main gallery. I want to say that forbidden photos (sex), can be placed all to see without approval of the administrator. For test I created a gallery where you can register yourself and create privative its album and you publish, being able to place its photos (sex) that they will be seen by all in the public gallery of album. The photos that you to place in album privative, are restricted to the guests with password, but the photos that you to place in albuns that they are created by the users but are not privative, go for the main gallery without approval of the Admin.
   Thanks,
  Luiz ;)

http://64.21.165.169/teste

Admin: xxxxxx
Pwd: xxxxxx

[edit Abbas]
Never post admin login account publicly.
[/edit]

Joachim Müller

Are you actually trying to report that you have enabled admin approval for the particular group, yet the pics still show up without approval. If yes, post a screenshot of your groups page (attach it to your posting using "additional options" when composing your message).

luizccm

It is not this!
I go to look for to be more clearly possible, explaining the problem step by step:

1 - The configurations in the group for the registered users, are configured to allow photos without approval of the ADMIN, only for personal gallery. For public gallery, it needs the approval of the ADMIN.

2 - The user creates privative and public its album. In album privative it places the photos for its guests who have the password. These photos do not need the approval of the ADMIN.

3 - In album that the user did not place password (public), it can also place the photos without approval of the ADMIN! But in this in case that, the photos go to be seen in the public main gallery.

4 - The photos of the public album of this user, would have to be approved by the ADMIN, before being seen for all.

5 - We cannot leave a person working for account to approve all the privative and public photos of albuns, therefore it is situation it cannot be of this form, being necessary a correction to make with that all the photos of the users who are not placed in album privative, either incaminhada for approval of the ADMIN.

In case that still it has some doubt on the agreement, access the address below and is registered, album creates privative its and places a photo in it and one another photo in the album I publish that you it created and it sees that the photo of albúm public goes to appear in the page main of the gallery without approval of the ADMIN. This photo can be any photo, also (sex), that she is not accepted for the ADMIN.
Thanks,
   Luiz ;)

http://64.21.165.169/teste
(http://)(//)(http://)(//)

Nibbler

The configuration allows this, it is not a bug. If you set upload approval to off for user galleries then users are free to upload without approval into albums which are accessable by the general public.

luizccm

It can not be a BUG, but I very consider a serious deficiency of the system, therefore it is given to be able for the ADMIN, so that it is placed photos without its approval, in albuns privative, but at the same time the system allows that it also places in album public any type of photo! You close the door on the other hand, but the system opens for the other an avenue to enter of everything and the ADMIN goes to be the last one to know! This can not be a BUG, but it is a great imperfection of vision of that it could happen or be better to take off the privative option of album, that in the truth it only has of privative 50% and the remain is public without control of nothing. It is a form to deceive the system of approval of the ADMIN, when it opens the doors for album privative. The system functions very well for public gallery, but for privative it leaves very great an open door for some types of problems.
  Thanks,
   Luiz :-\

Joachim Müller

I'm sorry, I'm not able to replicate at all what you're saying. If you decide to enable admin approval, then do so. If you don't want approval, then don't enable it. What's the point of your complaints. I think you're mixing up the terms "personal" vs. "private" album. Privacy refers to viewing permissions, but not to upload permissions nor admin approval.

luizccm

Hi,
I am using copemine in varios other kinds of services in my portal, but my larger goal was to replace album system of public pictures / private that I have of PhotoPost PHP who has the defined and very rigid function in the that tells respect for albuns  public / exclusive with coherence total on the differences and permissions, supervising all that it is to be posted as public and letting without supervision all that is posted as private. Who knows in the future you can finish with this great incoherence in tell that all that is published to be public we are going to approve first to then publish   and all that is exclusive we will not supervise.
Even so, thank you very much by the attention, clearings and the interest in to help.
Luiz ;)

PhotoPost PHP : http://64.21.165.169/album

Copermine 1: http://64.21.165.169/topmodel

Copermine 2: http://64.21.165.169/theboy

Copermine 3: http://64.21.165.169/desaparecidos

Copermine 4: http://64.21.165.169/videoshow

Copermine 5: http://64.21.165.169/nightclub

Joachim Müller

Still can't make heads or tails out of your posting (language issue), maybe someone else can look into this.