administer galleries without view-permission
freddyseubert - October 19, 2009 - 10:16
| Project: | Image Gallery Access |
| Version: | 6.x-1.0-rc1 |
| Component: | Miscellaneous |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | fixed |
Jump to:
Description
Hello everyone!
My use case:
- Every authenticated user is allowed to create galleries
- Every authenticated user is allowed to administer OWN galleries (change title & description etc)
- Every authenticated user is allowed to grant rights to roles to view the gallery
The view-access and the restriction to post images to a gallery are working like a charm. But even if a user cannot view a gallery (/image), he can administer the gallery (/admin/content/image). And I don't want users without proper view-permissions to change the name or description of that gallery.
I am running
- IGA 6.x-1.0-beta3
- ACL 6.x-1.0
-
Am I doing something wrong or is there a workaround for this problem?
Regards, Freddy
#1
Hello,
Same problem for me...
If "admin galleries" permission is enabled, all authenticated user can view AND edit ALL galleries...
if "admin galleries" permission is disabled, authenticated users can :
- view all galleries
- only add image in their own galleries (with "moderator" permissions)
- NOT ADD galleries !
So i would like to if it is normal or if i'm doing something xrong like Freddy...
The question is : is IGA capable to handle galleries creation permission or only image post in a gallerie ?
Vincent
#2
Presently, IGA does in no way interfere with the 'administer galleries' permission. It works the same as if IGA was not installed.Hmm, sorry, I was confused. Administering galleries for which you don't have View access should not be possible. I'll investigate...
#3
thanks for your answer !
In my case all authenticated user have view permission for ALL galleries...
So i first thought that i had the same problem than freddy, but may be not !
In my case, i would like that user could only edit their own galleries to add another sub galleries and add image in it.
But i think that it is not IGA goals ?
Vincent
#4
@vhenninot: Please open a new thread, otherwise we'll get hopelessly confused. Wait — #276612: Allow moderators to create subgalleries seems to be what you're talking about, right? If yes, then continue there.
Please do not reply here!!!
#5
@freddyseubert (OP):
There's no concept like "the user's own galleries". Galleries are not owned by anyone.
If all authenticated users have administer galleries, then they can administer all galleries where they have View access. That's how it's supposed to work.
Is this really how it's behaving? This would be a bug.
I agree completely.
#6
@salvis: okay, thanks for clarifying. i'll investigate whether it's really a bug. there are >30 modules installed, so it could also be some sort of conflict between some of them (at least between access modules). gonna reopen the issue if i think it's a bug.
thanks again!
#7
Fixed in RC2.