Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: Password protect galleries  (Read 13091 times)

0 Members and 1 Guest are viewing this topic.

Kasper_Rasmussen

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
Password protect galleries
« on: October 06, 2003, 04:47:39 pm »
Is there any way to get a feature to password protect one or more galleries?
Logged

Zarsky

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 268
    • Zerr Family Website
Password protect galleries
« Reply #1 on: October 06, 2003, 04:52:32 pm »
Isn't that the purpose of the group permissions?  You could also use .htaccess files if you are under apache.
Logged
Read the Online DOCs, FAQ, and SEARCH the board BEFORE posting questions for help.

Oasis

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 252
  • iNSiGNiA
    • Pixnet Gallery
Password protect galleries
« Reply #2 on: October 07, 2003, 04:52:31 am »
no no no no, I think what he means is,
password protect individual user albums...
This is useful for coppermines used as user online photo albums.
This way they users can make albums that are accessible only by people
who have the correct password, no matter what group they're in...
Even if they were unregistered.

I pointed this feature out in my previous post "A few requested features"
It was based on user feedback from 50 or so testers, and at least 4 users requested it or something similar.
Logged
Pixnet Gallery: http://www.pixnet.net
iNSiGNiA Weblog: http://www.jayliu.org

Zarsky

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 268
    • Zerr Family Website
Password protect galleries
« Reply #3 on: October 07, 2003, 05:21:16 am »
oasis,

OK...I get it now...this is a good idea....There is currently a feature freeze for 1.2, but this is something we should look into for future versions.
Logged
Read the Online DOCs, FAQ, and SEARCH the board BEFORE posting questions for help.

jack

  • VIP
  • Coppermine frequent poster
  • ***
  • Country: 00
  • Offline Offline
  • Posts: 279
Password protect galleries
« Reply #4 on: October 07, 2003, 10:32:24 am »
I don't think that this is a good idea .. this way, you woul dhave to have two authntication and two authorisation systems working together. It would be a lot of work to ensure that adding the second would not weaken the first.

A better way of doing it would be to extend the current authorisation system to allow much more flexible permissions to be applied to a gallery.
Logged
Please do not contact me for support directly - instead: post on this board!

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Password protect galleries
« Reply #5 on: October 07, 2003, 10:56:31 am »
I guess it all boils down to enable a user to be a member in multiple groups (instead of one) or groups to be members of other groups...
This concept is widely used in other areas (e.g. operating systems) and is a conecpt users can easily adopt to.

GauGau
Logged

jack

  • VIP
  • Coppermine frequent poster
  • ***
  • Country: 00
  • Offline Offline
  • Posts: 279
Password protect galleries
« Reply #6 on: October 07, 2003, 11:08:29 am »
Not just multiple groups per user, but also multiple allowed groups per gallery, and possibly the option of allowing or denying individual users access to a gallery. This will give a gallery owner much better control of who can access their gallery.
Logged
Please do not contact me for support directly - instead: post on this board!

wormie_dk

  • Tester
  • Coppermine regular visitor
  • *
  • Offline Offline
  • Posts: 73
Password protect galleries
« Reply #7 on: October 07, 2003, 01:17:40 pm »
With time I think a usefull feature would be category properties, so that you could allow your family to access a category called family and all albums in that category.
Logged

Oasis

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 252
  • iNSiGNiA
    • Pixnet Gallery
Password protect galleries
« Reply #8 on: October 07, 2003, 01:24:23 pm »
but that means that the user can only control which "groups" can view their album... The purpose of password protecting albums, is so that the user can control access to members and visitors alike... For example, if someone has an album on my gallery site, and he decides that he is going to share this album only with a few of his friends, because there are some private photos he does not want others to see. He could give these friends a password that would let them access the album no matter what group they are in or even if they are not members.

The problem with restricting groups is that members cannot choose what groups they are in. They cannot choose who they want in the same group as them. They cannot choose which people they DON'T want in a group. All these are controlled by the gallery admin.

Quote
this way, you woul dhave to have two authntication and two authorisation systems working together. It would be a lot of work to ensure that adding the second would not weaken the first.

Actually, it's not as complicated as it seems. The first authentication system, of course, is the registration system. Users are either members or they are not. The second authentication system is the album authentication. If an album is protected, anyone wishing to see it will be asked for a password, REGARDLESS OF MEMBERSHIP! So it is just like a private album to ALL GROUPS that can only be viewed with a correct password. You know what I mean?
Logged
Pixnet Gallery: http://www.pixnet.net
iNSiGNiA Weblog: http://www.jayliu.org

joelpt

  • Coppermine newbie
  • Offline Offline
  • Posts: 8
    • http://nobs.webhop.net
Password protect galleries
« Reply #9 on: October 10, 2003, 11:48:22 pm »
I agree with oasis on this one.  

Adding passwords to user-albums would not weaken the existing auth system at all.  It's just an additional, optional layer of restrictiveness.  And the real power of such a setup, is that the users can set, unset, or change their album's password as they choose, without any admin intervention, and it's about as easy to do as typing in the new password.

The password setup has a specific use, and what I would call a narrow scope of "consequence".  Extending the current authentication/usergroup scheme to encompass user-albums would be quite involved and tricky, as the preceding posts in this thread already evidence.

Users can't determine who is in which of the usergroups -- without adding user-createable usergroups to the mix.  And observe also: a password actually functions as a user-created usergroup.  It's not quite as flexible to cover all possible desired uses and inclusion/exclusion schemes, but for ease of implementation and typical usage it's a darn good solution.  :)

Joel
Logged

Tarique Sani

  • VIP
  • Coppermine addict
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 2712
    • http://tariquesani.net
Password protect galleries
« Reply #10 on: October 11, 2003, 05:15:18 am »
Well I am not in favour of individually password protected albums atleast this version- For the simple reason that it would create a mess in the code which already is too messy.

May be V2.0
Logged
SANIsoft PHP applications for E Biz

Oasis

  • VIP
  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Gender: Male
  • Posts: 252
  • iNSiGNiA
    • Pixnet Gallery
Password protect galleries
« Reply #11 on: October 11, 2003, 06:08:36 am »
yes, i do think you already have a lot on your hands right now. But do please keep this as a consideration for future versions.  :D
Many users have been asking for it.  :lol:

--
NCTU Student Union Gallery
http://photo.enctu.org/index.php?lang=english
Logged
Pixnet Gallery: http://www.pixnet.net
iNSiGNiA Weblog: http://www.jayliu.org
Pages: [1]   Go Up
« previous next »
 

Page created in 0.024 seconds with 20 queries.