1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

2.5.x Gallery items don't respect forum permissions

Discussion in 'Bug Reports' started by RobinHood, Mar 20, 2017.

  1. RobinHood

    RobinHood Member

    Messages:
    106
    Likes Received:
    18
    Trophy Points:
    18
    I'm testing groups at the moment and only a handful of users have permissions to access the groups section of the site.

    I just tested the gallery with Son's gallery and the photos I uploaded are visible to the public o_O

    The photos appear in the latest post widget on the home page and on the new posts page of the gallery.

    The album itself doesn't seem to appear in the albums page of the gallery though.
     
    Last edited: Mar 20, 2017
  2. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    Where is widget on sonnb-Gallery?
     
  3. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    This is a general problem with Social Groups add-on. Neither Gallery (also not XFMG) is protected by the Groups permissions. This is a bug that is really old.
     
  4. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    I have added some widget but it is working fine:/
     
  5. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    Wasn't it in the last versions that group members could post pictures in the media gallery of the group but when you know the URL everyone could see the pictures even if it was a secret group? Have you fixed this @Nobita@Nobita ? Does Media added in the social groups only be accessible to their group members?
     
  6. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    Yes.
     
  7. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    I use XFMG and NSG 2.6.5. Still I see ALL media of the entire XFMG in the MEDIA tab of ALL GROUPS.
    In addition to that, if I add media to the groups, including the secret ones, it is displayed on the XFMG index even if "hide media category" in NSG is selected. It only hides the category but NOT the media...

    How it must work:
    1. Media posted in Public Groups: Show in Group Media + Show on XFMG index
    2. Media posted in Closed Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
    3. Media posted in Secret Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
    4. Media posted in XFMG: NOT Shown in ANY GROUPS' MEDIA tab
    This is an issue since 30 updates now. Please fix this.
     
    Last edited: Apr 6, 2017
    Dadparvar likes this.
  8. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    I have dropped the option show media in index. It is not need anymore. In next version it is auto handle each media, if any media belong to public groups so it is visible to anywhere.
     
  9. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    So all groups media can not be seen now even when having the category opened in XFMG?

    Can you please give out a new updated version then to test it?
     
  10. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    Yes dependency in group privacy.
     
  11. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    Please give a hot fix to test it.
     
  12. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    I still testing some performance. I will send you an copy when it is complete.
     
    Freelancer likes this.
  13. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
  14. RobinHood

    RobinHood Member

    Messages:
    106
    Likes Received:
    18
    Trophy Points:
    18
    There is an issue with secret groups too.

    I've just created an album and added a photo in Son's XenGallery in a secret group and it appears on the home page in the recent gallery widget and also shows up in the new photos page of the gallery.

    Totally not secret at all :eek:
     
  15. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    Will this be addressed in a future update? Because nothing has changed in 2.6.6
     
    moshbit and RobinHood like this.
  16. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    2.7.2 A: Now everything with "media" is like in 2.5.0 again... ;) But beside that the old permission problems still exist. Anyone who has the link to the category where the "Social Groups Media" is stored can see the media of all social groups........
     
    alfa1 likes this.
  17. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    What 2.5.0 does?
     
  18. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    In 2.5 it was possible to add photos to the media gallery and only see those in the group that were added in the specific group but if you had the URL to the "hidden" category you can see ALL pictures from all groups, even the secret ones. With 2.6.x it was all messed up and displayed the whole gallery in every group and with 2.7.x it is now back to 2.5.x functionality.

    What we really need is media only be accessible/viewable by the respective group members.
     
  19. truonglv

    truonglv Staff Member Tech Support

    Messages:
    3,442
    Likes Received:
    1,334
    Trophy Points:
    113
    I have tested with normal users. And they cannot view photos of groups which they not belong to. Does you have any special cases?
     
  20. Freelancer

    Freelancer Active Member

    Messages:
    551
    Likes Received:
    176
    Trophy Points:
    43
    The case I describe is that you can only setup one category in the XFMG for Social Groups. It can be "hidden" from the XFMG categories navigation but when a user has the full path to that category he can see ALL media from ALL groups, no matter if he is in a group or not...

    For example, I assigned a XFMG category named "social groups media private" to Nobita Social Groups and if I put the URL into the browser, every registered user can see all media from all groups...

    https://www.mywebsite.com/media/categories/social-groups-media-private.34/