Privacy problems with cb gallery

Hello,

there is a problem with the privacy of cb gallery.

We can set that only special users or admins can create albums or files. This is good.

But when a special user or admin creates albums or files, the profile owner can change or even delete the albums and files....

There should be an option to set who can delete or change albums and files and not only an option to set who can create these things..

Or just one option, who can create, but then the profile owner should not be able to delete or change the work of the special users. This can easily be done, even if it is a mistake of the profile owner....

Is there an easy way to realize that or can you change this at all in the extension?

Thanks.


Regards

Tobias

It's because that user is the owner of the album or media. Edit the album or media and change the owner to your user id. This will be fixed as per the below ticket where the owner will just default to the viewing user id instead of the gallery owner.

forge.joomlapolis.com/issues/6799

When we upload a file in frontend, we can not write the user id for files, just for albums. So, the album can not be deleted. But the files in the album still can be deleted by the user...

You can't change the owner when uploading. You have to change it after uploading by editing it. Again, this will be addressed in a future release where the default owner will be always the uploader and not the gallery owner.

EDIT: We have found a new bug, i guess... We have joomla usergroup 'test' which is under 'author'.

When we set create files and albums to special, the user can work with it. That is ok.

But when we set it so super users, the user can still work with it??? Just normal registered users can not.. I think, this is not ok ???

Some months, but no news... Do you know when the change will arive?

Thanks.

Once I'm done with CB Activity 4.2.0, which I'm working on now. Will then be working on another CB Gallery release where this will be fixed. You can check out what's left for CB Activity 4.2.0 below. Mainly some improvements to notification parsing and will be rewriting how global activity is stored.

But when we set it so super users, the user can still work with it??? Just normal registered users can not.. I think, this is not ok ???

Create Access is just that. Create Access. It is not Edit Access. If the user is the owner of the gallery entry they can edit it, delete it, etc..