Gallery items don't respect forum permissions

I use XFMG and NSG 2.6.5. Still I see ALL media of the entire XFMG in the MEDIA tab of ALL GROUPS.
In addition to that, if I add media to the groups, including the secret ones, it is displayed on the XFMG index even if "hide media category" in NSG is selected. It only hides the category but NOT the media...

How it must work:
  1. Media posted in Public Groups: Show in Group Media + Show on XFMG index
  2. Media posted in Closed Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
  3. Media posted in Secret Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
  4. Media posted in XFMG: NOT Shown in ANY GROUPS' MEDIA tab
This is an issue since 30 updates now. Please fix this.
 
Last edited:
It is only "fixed" if this is how it is:
;)

Freelancer said:
How it must work:
  1. Media posted in Public Groups: Show in Group Media + Show on XFMG index
  2. Media posted in Closed Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
  3. Media posted in Secret Groups: Show in Group Media + Do NOT show on XFMG index plus no access even if the URL is known
  4. Media posted in XFMG: NOT Shown in ANY GROUPS' MEDIA tab
Click to expand...
Freelancer
 
In 2.5 it was possible to add photos to the media gallery and only see those in the group that were added in the specific group but if you had the URL to the "hidden" category you can see ALL pictures from all groups, even the secret ones. With 2.6.x it was all messed up and displayed the whole gallery in every group and with 2.7.x it is now back to 2.5.x functionality.

What we really need is media only be accessible/viewable by the respective group members.
 
Freelancer said:
In 2.5 it was possible to add photos to the media gallery and only see those in the group that were added in the specific group but if you had the URL to the "hidden" category you can see ALL pictures from all groups, even the secret ones. With 2.6.x it was all messed up and displayed the whole gallery in every group and with 2.7.x it is now back to 2.5.x functionality.

What we really need is media only be accessible/viewable by the respective group members.
Click to expand...
FreelancerI have tested with normal users. And they cannot view photos of groups which they not belong to. Does you have any special cases?
 
Nobita said:
Does you have any special cases?
Click to expand...
Nobita
The case I describe is that you can only setup one category in the XFMG for Social Groups. It can be "hidden" from the XFMG categories navigation but when a user has the full path to that category he can see ALL media from ALL groups, no matter if he is in a group or not...

For example, I assigned a XFMG category named "social groups media private" to Nobita Social Groups and if I put the URL into the browser, every registered user can see all media from all groups...

https://www.mywebsite.com/media/categories/social-groups-media-private.34/
 
Freelancer said:
The case I describe is that you can only setup one category in the XFMG for Social Groups. It can be "hidden" from the XFMG categories navigation but when a user has the full path to that category he can see ALL media from ALL groups, no matter if he is in a group or not...

For example, I assigned a XFMG category named "social groups media private" to Nobita Social Groups and if I put the URL into the browser, every registered user can see all media from all groups...

https://www.mywebsite.com/media/categories/social-groups-media-private.34/
Click to expand...
FreelancerFixed :D
 
I know but my server is a private server I can not let you have access there. I am sorry. ;)

XAMPP behaves very differently. As @alfa1 once said, you need to have a Nobita personal live server for your testing with XFMG installed.
 
Freelancer said:
I know but my server is a private server I can not let you have access there. I am sorry. ;)

XAMPP behaves very differently. As @alfa1 once said, you need to have a Nobita personal live server for your testing with XFMG installed.
Click to expand...
FreelancerI have not renew XenMedia addon so cannot install to live server. Your infomation is private. Everyone provide info for me alway be private.
 
I am sorry, due to the nature of my clients and their need of extra privacy, it is not possible. Maybe @alfa1 can help out.
 
Freelancer said:
I am sorry, due to the nature of my clients and their need of extra privacy, it is not possible. Maybe @alfa1 can help out.
Click to expand...
Freelancer
alfa1 said:
Nobita, you really need to renew your XFMG license and have a live server to test on. There is just too much difference between a real world server stack and XAMPP.
XFMG renewal costs only $15.
Click to expand...
janslu said:
@Nobita I'll be happy to cover the cost. Let me know how, and I'll send you the money. Your add-on is being used by my users and I'll be happy to send you some additional money.
Click to expand...
Installed in my site now. You can play with that (Also for latest build)
 
You must log in or register to reply here.
Back
Top