Admin Access to Private Albums Admin Access to Private Albums
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Admin Access to Private Albums

Started by bosewicht, January 23, 2006, 11:27:33 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

bosewicht

Ok, i am running the current release of coppermine. My problem is a user of mine, has a private album that is password protected. When i log in as admin, i can see that there are X amount of abums, but when i try to view his album, i cannot see it. Is there anyway for the admin to view albums set as "only me" and password protected. The prob is, the user is a teenager and the last thing i need is for his parents to find any kind of bad pics in his gallery on my site. Thanks in advance

Tranz

If it's password-protected, how can his parents see the album?

bosewicht

because if he is sitting there looking at things he shouldn't and they walk in. His parents are friends of mine and I would just rather not take a chance. Is there a way to access this album as admin?

bosewicht

So there is no way for an admin to view this album? I may have to look into other image galleries then. It just seems that this should be an obvious option. Admin should have rights to all albums regardless of the users settings.

Paver

You should wait at least a day or two for a response.  This is not a hotline. 

I don't have a simple answer because I haven't looked at password-protected albums yet.  The files themselves are not password-protected, so if you can find the files, anyone can view them.  There are ways to stop viewing the files directly, mentioned in other threads (using .htaccess mainly on apache webservers).  Using phpMyAdmin, you could look in the database to see what the filepaths are for the files in the password-protected album.

I'm sure there's a yes or no answer to this; I just don't know it right now and don't have time to look into it until later.  Please be patient.  That's just common courtesy in an open-source community where everyone is volunteering his/her time & energy.

Tranz

Quote from: bosewicht on January 24, 2006, 12:14:23 AM
So there is no way for an admin to view this album? I may have to look into other image galleries then. It just seems that this should be an obvious option. Admin should have rights to all albums regardless of the users settings.

Geesh, some of us actually have to work or sleep depending on time zone. I can't test it right now while at work but with your attitude I'm not going to later.

bosewicht

yes, i am familiar with the open source community and apologize if i sounded in a hurry. After looking through the docs, i think as long as I set up approval = yes, I should be fine. That is just the last thing i need is my friends teenager storing porn on one of my sites.  It just seems to me that admin  privileges  should over ride users preferences.  IMHO.

bosewicht

I mean seriously though, when a developer says:

Quote from: TranzNDance on January 23, 2006, 11:36:27 PM
If it's password-protected, how can his parents see the album?

That is just insane to me.  "Most people don't know about Rootkit, so why should they care?"  <- makes about as much sense as TranzDance's comment.

Paver

Nice attitude.  In just 5 posts, you've managed to use 2 of them to antagonize a tireless supporter & developer.

If the feature you want is not in Coppermine right now, I can think of a fairly simple mod to add in such a feature.  But I'm loathe to look into this now.  Since I'm physically unable to hold a grudge, I'll stop back in a few days and lend a hand.  If you cannot wait until then, set your gallery offline and put up a "maintenance" message.  Or find a commercial product with a 24-7 telephone hotline that never asks you to clarify anything you say.

Joachim Müller

I wasn't able to replicate this issue: when going to my test gallery, loging in as non-admin test user, creating a pw-protected album and uploading a pic there, then logging out and logging in as admin I was able to see the pic just fine without being forced to enter the password.
Post a link to your site and two non-admin test user accounts.
Review your attitude, you were able to upset two excellent supporters who usually stay very calm no matter what users post.

bosewicht

And again, I apologize. I just felt the comment of go ahead and let the little kid store porn on your website and his parents won't know b/c it has a password was a little ...... strange. So everyone who i might have made upset, I APOLOGIZE.

Joachim Müller

OK, apologies accepted (maybe I was drawn away by the nick you have chosen, for users who don't speak German: "Bösewicht" means "bad guy" ;)). Is your issue solved then?

Tranz

Quote from: bosewicht on January 24, 2006, 08:45:48 AM
And again, I apologize. I just felt the comment of go ahead and let the little kid store porn on your website and his parents won't know b/c it has a password was a little ...... strange. So everyone who i might have made upset, I APOLOGIZE.
Look, you did not mention porn in your post. Don't call me insane when you're the one thinking people should read your mind.