User album default permissions

WizardOfZo · Guru Joined: Sep 24, 2008 Posts: 55

I have seen other posts about problems with the default permissions when a new user album is created.
None of the answers in those posts seem to answer the question:
How do I simply change the user album default permissions/

I do not want users to be able to change permissions on their albums.
I have a sub album under the top level.
No permissions are set for "Registered users" in the Gallery that is listed in User Albums as shown here:

Quote: › Group Permissions
Group name Permission Action
Everybody [core] View all versions
Site Admins All access

User Permissions
User name Permission Action
New User Permission

Every time I create a test user, they have the ability to "Change Item Permissions"
and they can remove permissions to "view all versions"from "Everybody"

Is there a simple way to prevent this?

AdBot

g2user · Novice Joined: Dec 21, 2008 Posts: 21

ha, I was very frustrated last month on this. The answer is no. The logic here is who own the album, who has the power. So you want to take away the power? no way. Shocked

WizardOfZo · Guru Joined: Sep 24, 2008 Posts: 55

I did find one way posted on the Gallery2 site that seems to get the job done:
in modules/useralbum/classes/UserAlbumHelper.class
After;

Code: › $ret = GalleryCoreApi::addUserPermission($albumId, $user->getId(), 'core.all');
if ($ret) {
GalleryCoreApi::releaseLocks($lockId);
return $ret;
}

I added

Code: › $ret = GalleryCoreApi::removeUserPermission($albumId, $user->getId(), 'core.changePermissions');
if ($ret) {
GalleryCoreApi::releaseLocks($lockId);
return $ret;
}

I also added this to keep users from editing the album settings:

Code: › $ret = GalleryCoreApi::removeUserPermission($albumId, $user->getId(), 'core.edit');
if ($ret) {
GalleryCoreApi::releaseLocks($lockId);
return $ret;
}

I tred adding this to keep users from moving an album
but it created errors:

Code: › $ret = GalleryCoreApi::removeUserPermission($albumId, $user->getId(), 'core.move');
if ($ret) {
GalleryCoreApi::releaseLocks($lockId);
return $ret;
}

jettyrat · Moderator Joined: Nov 28, 2005 Posts: 1144

I don't think core.move is a valid gallery permission. You can see the valid permissions in the g2_permissionsetmap db table...

WizardOfZo · Guru Joined: Sep 24, 2008 Posts: 55

I changed that last one to:

Code: › $ret = GalleryCoreApi::removeUserPermission($albumId, $user->getId(), 'core.delete');

and that did the trick

Web Hosting India