coppermine-gallery.com/forum

Support => cpg1.4.x Support => Older/other versions => cpg1.4 permissions => Topic started by: hobby on February 13, 2006, 07:10:58 PM

Title: cpg 1.43 album permission bug?
Post by: hobby on February 13, 2006, 07:10:58 PM
hello, i am using cpg 1.43 and got the following major problem:

the album "party" is passwort protected and another album (secret) contains pics which shall only be viewable by users of the group "secret" i.e....

so...when a guest now typing the correct passwort for the party album, hey is able to view not only the party pics, he also can be look at the secret-album pictures...

another example:

when a user normal registerd user logs in, he also can view the pics of the secret ablum, instead he isnt member of the group "secret"...

anyone else with the same major security problems???

some help of anyone would be great, because its really a problem...or is it a bug maybe???

thx and cu

:)

-hobby
Title: Re: cpg 1.43 album permission bug?
Post by: Joachim Müller on February 13, 2006, 07:59:59 PM
hard to say without a link and a non-admin test user account... ;)
Title: Re: cpg 1.43 album permission bug?
Post by: hobby on February 13, 2006, 08:10:37 PM
hm...maybe i schould inform you, that it was a 1.3 version, which i upgraded to version 1.43... and: yes, i run the update.php...but i wont work.

now, anyway, i removed it to replace it completly with 1.43...

this works fine.

but thx anyway :))