Users may not upload to their own albums Users may not upload to their own albums
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Users may not upload to their own albums

Started by smantscheff, November 05, 2010, 02:33:55 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

smantscheff

On a fresh install I created a new group with permission to upload to their own album, but not to public albums.
This is the database entry for it:
              group_id: 4
            group_name: Agenturen
           group_quota: 1024
      has_admin_access: 0
     can_rate_pictures: 0
       can_send_ecards: 0
     can_post_comments: 0
   can_upload_pictures: 0
     can_create_albums: 1
pub_upl_need_approval: 1
priv_upl_need_approval: 0
          access_level: 3

As to be expected, can_create_albums is 1, but can_upload_pictures is 0, so that users cannot upload to their own albums.
How can I set permissions so that users of this group may upload to their own albums but not to anywhere else?


Αndré

The database entries are a little bit misleading (historical reasons). Please post a screen shot of that group in your group manager. Basically you have to allow this group to have a personal gallery, but aren't allowed to upload to public albums. As far as I can judge this should be the case for your group. Maybe a bug crept in while working on that permissions lately.

Please describe what happens. Users can create albums... what happens then?

smantscheff

Attached are a groups manager screenshot and a group database entry screenshot.
A member of the group can successfully add an album.
When a member of this group tries to upload a picture, the album drop down list contains exactly one entry with their own album.
When trying to upload in their own album, this message appears (in debug mode):
Fehler
Du hast kein Recht, diese Operation auszuführen.

Datei: /srv/<dirname>/htdocs/db_input.php - Zeile: 511

Αndré

Cannot confirm on my testbed. Which Coppermine version do you use? If it's cpg1.5.8, can you please perform an update with the latest svn revision?

smantscheff

I don't get it. I tested it again, switched the user group write permission (can_upload_pictures) from true to false again, and now it works as it should. Very strange.
The version is 1.5.8, revision 7805.