Album password set, but im can still browse the pictures Album password set, but im can still browse the pictures
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Album password set, but im can still browse the pictures

Started by perottol, May 21, 2007, 01:32:52 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

perottol

Hi,

I have just installed cpg1.4.10
When I set an album password it seems like nothing happend, I can still log out and browse the pictures in the album.
Also I have read the manual, but that dont give any answers.

Album: http://snotpope.com/gallery/thumbnails.php?album=7
Password: testpassword


I hope some of you can help me.

Best regards
Per-Otto

Joachim Müller


Nibbler

Logging out does not revoke your access. Only way to do that is to clear your cookies.

pcinfoman

Strange, logging out should show you what it acts like to an unregistered user.

Anyway, I am having the exact same problem. I installed the gallery today and set the password in Firefox. I went to the site in Internet Explorer and can still view all the images with no prompt for a password. It is NOT a cookie issue as I have never been there before using IE.

In addition, the manual says:

----------------------------
Note: when setting an album password, the permission dropdown field "Album can be viewed by" will be switched automatically to "me only" - this is expected behaviour. If you change the "Album can be viewed by" to another selection, you must disable the album password as well.
----------------------------

This is NOT the case. On my album preferences screen, I have NOTHING that refers to "permissions". I do not have anything on the screen that refers to "Album can be viewed by".

This is not only happening on this gallery, but also on the other gallery I just installed yesterday.

Ideas?

pcinfoman

OK, I think I figured this out.

Goto your "Config" area in your CP and find the section marked "Files and thumbnails advanced settings".
Under that section, there is an option labeled "Albums can be private". Set it to "Yes".
With that option set to "yes", you will have the option on the "album preferences" for "Album can be viewed by".
Set the "Album can be viewed by" setting to "Me Only". This is supposed to automatically change when you set the password.

I set my "Albums can be private" to "No" because I did not want users to have private albums. I had to modify their permissions in the "Groups" area instead.

Also, logging our DOES allow you to see the password requirement.

Joachim Müller

Quote from: pcinfoman on May 24, 2007, 05:25:30 AMGoto your "Config" area in your CP and find the section marked "Files and thumbnails advanced settings".
Under that section, there is an option labeled "Albums can be private". Set it to "Yes".
With that option set to "yes", you will have the option on the "album preferences" for "Album can be viewed by".
Set the "Album can be viewed by" setting to "Me Only". This is supposed to automatically change when you set the password.

I set my "Albums can be private" to "No" because I did not want users to have private albums. I had to modify their permissions in the "Groups" area instead.
Imo you draw the false conclusions: setting "Albums can be private" to "no" will make all albums publicly accessible. No access restrictions can be applied then.

Quote from: pcinfoman on May 24, 2007, 05:11:15 AMAnyway, I am having the exact same problem. I installed the gallery today and set the password in Firefox. I went to the site in Internet Explorer and can still view all the images with no prompt for a password.
I'd like to have a look at this. Please post a deep link to a password-protected album on your gallery along with a password.

pcinfoman

Quote from: GauGau on May 24, 2007, 07:16:16 AM
I'd like to have a look at this. Please post a deep link to a password-protected album on your gallery along with a password.
Well, you quoted my 2nd post, but did not read it. I said I solved the problem. Thank you anyway.

Joachim Müller

Marking thread as solved then. The suggestions about "Albums can be private" are wrong though.