Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Admin Access to Private Albums  (Read 7089 times)

0 Members and 1 Guest are viewing this topic.

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Admin Access to Private Albums
« on: January 23, 2006, 11:27:33 pm »
Ok, i am running the current release of coppermine. My problem is a user of mine, has a private album that is password protected. When i log in as admin, i can see that there are X amount of abums, but when i try to view his album, i cannot see it. Is there anyway for the admin to view albums set as "only me" and password protected. The prob is, the user is a teenager and the last thing i need is for his parents to find any kind of bad pics in his gallery on my site. Thanks in advance
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: Admin Access to Private Albums
« Reply #1 on: January 23, 2006, 11:36:27 pm »
If it's password-protected, how can his parents see the album?
Logged

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Admin Access to Private Albums
« Reply #2 on: January 23, 2006, 11:41:14 pm »
because if he is sitting there looking at things he shouldn't and they walk in. His parents are friends of mine and I would just rather not take a chance. Is there a way to access this album as admin?
Logged

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Admin Access to Private Albums
« Reply #3 on: January 24, 2006, 12:14:23 am »
So there is no way for an admin to view this album? I may have to look into other image galleries then. It just seems that this should be an obvious option. Admin should have rights to all albums regardless of the users settings.
Logged

Paver

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: us
  • Offline Offline
  • Gender: Male
  • Posts: 1609
  • Paul V.
Re: Admin Access to Private Albums
« Reply #4 on: January 24, 2006, 12:30:21 am »
You should wait at least a day or two for a response.  This is not a hotline. 

I don't have a simple answer because I haven't looked at password-protected albums yet.  The files themselves are not password-protected, so if you can find the files, anyone can view them.  There are ways to stop viewing the files directly, mentioned in other threads (using .htaccess mainly on apache webservers).  Using phpMyAdmin, you could look in the database to see what the filepaths are for the files in the password-protected album.

I'm sure there's a yes or no answer to this; I just don't know it right now and don't have time to look into it until later.  Please be patient.  That's just common courtesy in an open-source community where everyone is volunteering his/her time & energy.
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: Admin Access to Private Albums
« Reply #5 on: January 24, 2006, 12:37:41 am »
Quote from: bosewicht on January 24, 2006, 12:14:23 am
So there is no way for an admin to view this album? I may have to look into other image galleries then. It just seems that this should be an obvious option. Admin should have rights to all albums regardless of the users settings.

Geesh, some of us actually have to work or sleep depending on time zone. I can't test it right now while at work but with your attitude I'm not going to later.
Logged

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Admin Access to Private Albums
« Reply #6 on: January 24, 2006, 12:40:43 am »
yes, i am familiar with the open source community and apologize if i sounded in a hurry. After looking through the docs, i think as long as I set up approval = yes, I should be fine. That is just the last thing i need is my friends teenager storing porn on one of my sites.  It just seems to me that admin  privileges  should over ride users preferences.  IMHO.
Logged

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Admin Access to Private Albums
« Reply #7 on: January 24, 2006, 03:22:25 am »
I mean seriously though, when a developer says:

Quote from: TranzNDance on January 23, 2006, 11:36:27 pm
If it's password-protected, how can his parents see the album?

That is just insane to me.  "Most people don't know about Rootkit, so why should they care?"  <- makes about as much sense as TranzDance's comment.
Logged

Paver

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: us
  • Offline Offline
  • Gender: Male
  • Posts: 1609
  • Paul V.
Re: Admin Access to Private Albums
« Reply #8 on: January 24, 2006, 04:12:27 am »
Nice attitude.  In just 5 posts, you've managed to use 2 of them to antagonize a tireless supporter & developer.

If the feature you want is not in Coppermine right now, I can think of a fairly simple mod to add in such a feature.  But I'm loathe to look into this now.  Since I'm physically unable to hold a grudge, I'll stop back in a few days and lend a hand.  If you cannot wait until then, set your gallery offline and put up a "maintenance" message.  Or find a commercial product with a 24-7 telephone hotline that never asks you to clarify anything you say.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Admin Access to Private Albums
« Reply #9 on: January 24, 2006, 07:39:32 am »
I wasn't able to replicate this issue: when going to my test gallery, loging in as non-admin test user, creating a pw-protected album and uploading a pic there, then logging out and logging in as admin I was able to see the pic just fine without being forced to enter the password.
Post a link to your site and two non-admin test user accounts.
Review your attitude, you were able to upset two excellent supporters who usually stay very calm no matter what users post.
Logged

bosewicht

  • Coppermine newbie
  • Offline Offline
  • Posts: 6
Re: Admin Access to Private Albums
« Reply #10 on: January 24, 2006, 08:45:48 am »
And again, I apologize. I just felt the comment of go ahead and let the little kid store porn on your website and his parents won't know b/c it has a password was a little ...... strange. So everyone who i might have made upset, I APOLOGIZE.
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: Admin Access to Private Albums
« Reply #11 on: January 24, 2006, 09:33:20 am »
OK, apologies accepted (maybe I was drawn away by the nick you have chosen, for users who don't speak German: "Bösewicht" means "bad guy" ;)). Is your issue solved then?
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: Admin Access to Private Albums
« Reply #12 on: January 24, 2006, 09:50:56 am »
Quote from: bosewicht on January 24, 2006, 08:45:48 am
And again, I apologize. I just felt the comment of go ahead and let the little kid store porn on your website and his parents won't know b/c it has a password was a little ...... strange. So everyone who i might have made upset, I APOLOGIZE.
Look, you did not mention porn in your post. Don't call me insane when you're the one thinking people should read your mind.
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.019 seconds with 19 queries.