permissions enabled for anonymous user: access images

i posted images as a authenticated user to 'personal image gallery' in categories/taxonomy called 'trip/tour photo gallery'.

logged off n tried to view as an anonymous user. they can still be viewed as individual nodes. but i cant access the photo galleries. ie. clicking on the trip/tour photo gallery link says '0 images in this album on 0 pages'.

tried to access images posted by me using image/uid but it still says no images in all the albums.

is the module broken or did i do something wrong?

i attempted to enable "has personal image gallery" for anonymous users. only then can anonymous users access the image galleries.

the thing is: i don't want anonymous users to be able to upload images or have personal galleries. what should i do?

Comments

bruno’s picture

bruno commented

By design, anonymous user don't have access to personal galleries. They have access to 'normal' galleries if you enabled 'access images' for anonymous users.

Anonymous’s picture

(not verified) commented

re: they can still be viewed as individual nodes.

if it is by design to have personal galleries restricted for anonymous users, then why can the images be accessed as individual nodes? isn't this just security by obscurity?

is there a way to restrict this properly ?

what ends up happening is that since googlebot and various other bots go through by node number, the nodes appear as top nodes occasionally and then are clickable (not to mention just putting random node numbers in the URL)