Gallery items don't respect forum permissions

There is an issue with secret groups too.

I've just created an album and added a photo in Son's XenGallery in a secret group and it appears on the home page in the recent gallery widget and also shows up in the new photos page of the gallery.

Totally not secret at all :eek:
 
2.7.2 A: Now everything with "media" is like in 2.5.0 again... ;) But beside that the old permission problems still exist. Anyone who has the link to the category where the "Social Groups Media" is stored can see the media of all social groups........
 
In 2.5 it was possible to add photos to the media gallery and only see those in the group that were added in the specific group but if you had the URL to the "hidden" category you can see ALL pictures from all groups, even the secret ones. With 2.6.x it was all messed up and displayed the whole gallery in every group and with 2.7.x it is now back to 2.5.x functionality.

What we really need is media only be accessible/viewable by the respective group members.
 
Freelancer said:
In 2.5 it was possible to add photos to the media gallery and only see those in the group that were added in the specific group but if you had the URL to the "hidden" category you can see ALL pictures from all groups, even the secret ones. With 2.6.x it was all messed up and displayed the whole gallery in every group and with 2.7.x it is now back to 2.5.x functionality.

What we really need is media only be accessible/viewable by the respective group members.
Click to expand...
FreelancerI have tested with normal users. And they cannot view photos of groups which they not belong to. Does you have any special cases?
 
Nobita said:
Does you have any special cases?
Click to expand...
Nobita
The case I describe is that you can only setup one category in the XFMG for Social Groups. It can be "hidden" from the XFMG categories navigation but when a user has the full path to that category he can see ALL media from ALL groups, no matter if he is in a group or not...

For example, I assigned a XFMG category named "social groups media private" to Nobita Social Groups and if I put the URL into the browser, every registered user can see all media from all groups...

https://www.mywebsite.com/media/categories/social-groups-media-private.34/
 
Freelancer said:
The case I describe is that you can only setup one category in the XFMG for Social Groups. It can be "hidden" from the XFMG categories navigation but when a user has the full path to that category he can see ALL media from ALL groups, no matter if he is in a group or not...

For example, I assigned a XFMG category named "social groups media private" to Nobita Social Groups and if I put the URL into the browser, every registered user can see all media from all groups...

https://www.mywebsite.com/media/categories/social-groups-media-private.34/
Click to expand...
FreelancerFixed :D
 
You must log in or register to reply here.
Back
Top