ZenphotoCMS Forum
Registered users can see unpublished albums - Printable Version

+- ZenphotoCMS Forum (https://forum.zenphoto.org)
+-- Forum: Support (https://forum.zenphoto.org/forum-1.html)
+--- Forum: General support (https://forum.zenphoto.org/forum-4.html)
+--- Thread: Registered users can see unpublished albums (/thread-13975.html)



Registered users can see unpublished albums - ctdlg - 16-09-2024

Hello,

Using Zenphoto 1.6.4.

Visitors cannot see unpublished albums. OK !

Users admin page, albums section : unpublished elements box is unchecked.
Registered users can see those unpublished sub albums. They should not !

Bien cordialement




Registered users can see unpublished albums - acrylian - 16-09-2024

Check which rights the users in question have. Info abou that here: https://www.zenphoto.org/news/user-rights/

Also try 1.6.5b as there have been some fixes in that regard (although actually in another area).




Registered users can see unpublished albums - ctdlg - 16-09-2024

@acrylian :
I did check the page you mention before posting.
1.6.5b does not solve the problem.
Here are my user settings
Screenshot




Registered users can see unpublished albums - acrylian - 16-09-2024

The screenshot being French makes it a bit complicated (please always use English in the future ;-)).

You have enabled "Access all" (ALL_ALBUMS_RIGHTS) rights. "View unpublished" is for front end only (as our doc mentions) as the backend for management does not make any difference here.

If you really want to limit what users can see you have to define managed albums.




Registered users can see unpublished albums - ctdlg - 17-09-2024

Sorry for the french screenshot.

Front end and
"View unpublished disabled"
does not work with registered user.
Conflicts with Access all" (ALL_ALBUMS_RIGHTS) ?




Registered users can see unpublished albums - acrylian - 17-09-2024

Conflicts with Access all" (ALL_ALBUMS_RIGHTS) ?

Yes, it is a superior right that grants access to all and therefore overpowers the "View unpublished" right. Disabling both should actually achieve what you want.




Registered users can see unpublished albums - ctdlg - 17-09-2024

Thank you for your explanations.