Private Exhibit

[seanspeng]

How can we get back the previous private exhibit? I found after upgrade, all the previous exhibit link that I gave out before does not work anymore... Please let us know the instruction. Thank you!

[DavidW]

Create a user and associated password in the user editor, add the relevant exhibition(s) to that user (same screen).

Make sure that the private exhibition(s) appear in your structure, otherwise the logged in user won't see them.



David

[seanspeng]

So in other words, there is no way to have the previous Private Exhibit link work anymore?

[neil_r]

I guess not but the new way is very versatile and allows you to set very specific permissions. A NOTE OF CAUTION THOUGH. Be very careful how you set up "Virtual Exhibitions" as you can give access through the virtual exhibition that has not been set in the user or gallery editor.

N

[seanspeng]

Thanks for the explanation. But to be honest, I don't like this new system. EE is not like a community type of gallery, so this kind of Private Permission does not work well.

The previous link with pass sharing works much better. With the current login system, what if my client just want to share the private exhibit (wedding for example) with their hundreds of friends? There is no way this can be accomplished with the current permission system.

Pekka, any insight on this?

[neil_r]

Thanks for the explanation. But to be honest, I don't like this new system. EE is not like a community type of gallery, so this kind of Private Permission does not work well.

The previous link with pass sharing works much better. With the current login system, what if my client just want to share the private exhibit (wedding for example) with their hundreds of friends? There is no way this can be accomplished with the current permission system.

Pekka, any insight on this?

You could set a user ID and Password (and permissions in the user editor)for an exhibition and set it for many simultaneous logins, that way it would work like the old way but with two login parameters instead of one.

[Pekka]

Sean, have you read this: http://photography-on-the.net/forum/showthread.php?t=223352

You get

http://photography-on-the.net/gallery/index.php?id=rso

and can do things like

http://www.pekkasaarinen.com/rso

For community galleries you can have one such ee_passes id for viewers, and another account with editing/upload permissions.

I don't like this new system. EE is not like a community type of gallery, so this kind of Private Permission does not work well.

Learn it before you judge it. Please. I'm here to respond and talk about these things.

[seanspeng]

Pekka,

Sorry if my communication sounded rude. I meant nothing like that. I'll communicate my questions and feedbacks better in the future.

Thanks for the explanation and the links. I read it and understand how it works. I wish we could do the "add to SETUP_settings.php under line" step in the admin interface rather than edit the file direct - a wish item.

Many thanks!

[blulegend]

Is it possible to have a separate index altogether for a logged in user?

Can we completely hide a group if a user does not have access to any of the exhibitions in it?

Can a user be given access to an entire group?

[Pekka]

Thanks for the explanation and the links. I read it and understand how it works. I wish we could do the "add to SETUP_settings.php under line" step in the admin interface rather than edit the file direct - a wish item.


That is on my list, too. :)

[Pekka]

Is it possible to have a separate index altogether for a logged in user?

Can we completely hide a group if a user does not have access to any of the exhibitions in it?

Can a user be given access to an entire group?

For each user EE creates a site structure that are needed to access the exhibitions he has permissions for. If the exhibition is in last group under several nested groups and some of these groups contain exhibitions that are not permitted, EE still shows all those groups because that group branch leads to permitted exhibition.

See http://photography-on-the.net/forum/showthread.php?t=226207

[blulegend]

In my testing last night, I had a group with exhibitions in it that were only visible to one user. That user did not have rights to view the public exhibitions. On the user's index page, the titles of the public groups where displayed but when you navigate to them, as expected there were no exhibitions shown. The private group worked as expected. When I logged out from that user to view the public exhibitions, the private group title was still being displayed on the index page, though when clicked, no exhibitions were present.

My issue is that it seems to show the group name even though no exhibitions in that group are visible to the user.

[Pekka]

If you have links in a group (other than INDEX), you will see the group if it belongs to the structure. If that group does not have allowed exhibitions, you see nothing there on index page.

If you do not have links or exhibitions in last group of a branch and you still see the group, then it is a bug. A database dump of the database having this situation would help a lot to check it out (PM me).

Generally, what you see in user preview is what you get. It uses the same data.

[blulegend]

Got it. I had links selected for all of them. Works now. Thanks a lot Pekka!

[Pekka]

Great. I know this would be solved by giving users link permissions but I ran out of time to code that - maybe later.

[wkitty42]

this is confusing and not intuitive so far as all my playing has been able to achieve...

i created a user (user1) and set that user to only see exhibits 7,8,9 and 10... when i go to the structure page, i do NOT have these exhibits selected in the INDEX group... i select the group1 group and it does have these 4 exhibits listed... when i go to see the structure for user1, it shows that the user has access to exhibits 7,8,9, and 10 but it then shows a structure that starts with INDEX... that doesn't seem right as i expect it to not show INDEX but group1 which would be the index...

if i add those 4 exhibits to the INDEX group, then things appear to be kind of as i'd expect...

am i totally misunderstanding things and everything, exhibits and groups, MUST be selected in the INDEX group?? :(


this also brings me to this... if everything to be viewed from the main index page has to be selected under the INDEX group, how do we turn off access to other things like guestbook, news, and gallery map? i've tried removing them from the INDEX group but that also removes them for all, not just the selected restricted user...

additionally, are these additional items, restricted in what the logged in user sees? in otherwords, if a restricted user is logged in and clicks on the site map, he should only be able to see those exhibits and/or groups that he has access to...

[Pekka]

this is confusing and not intuitive so far as all my playing has been able to achieve...

i created a user (user1) and set that user to only see exhibits 7,8,9 and 10... when i go to the structure page, i do NOT have these exhibits selected in the INDEX group... i select the group1 group and it does have these 4 exhibits listed... when i go to see the structure for user1, it shows that the user has access to exhibits 7,8,9, and 10 but it then shows a structure that starts with INDEX... that doesn't seem right as i expect it to not show INDEX but group1 which would be the index...

if i add those 4 exhibits to the INDEX group, then things appear to be kind of as i'd expect...

am i totally misunderstanding things and everything, exhibits and groups, MUST be selected in the INDEX group?? :(

Structure always starts with INDEX (because that it is the starting page). It's a nested tree, and INDEX is the root.

In above situation you should select INDEX, click "group1" and save. Or put exhibitions on INDEX. You can rename INDEX to anything.

Think about these sentences:

Group contains groups or exhibitions or links.

Exhibitions can be anywhere.

User sees only groups which contain allowed exhibitions.

User does not see group nestings that are not connected to INDEX in the end.

Links do not have permissions, so groups that have links are always shown. It is adviseable to put links on index page only to avoid confusion.

Exhibitions are shown only if they are in groups that interconnect in the end to INDEX (or in INDEX), and that they are allowed for current user.

this also brings me to this... if everything to be viewed from the main index page has to be selected under the INDEX group, how do we turn off access to other things like guestbook, news, and gallery map? i've tried removing them from the INDEX group but that also removes them for all, not just the selected restricted user...

additionally, are these additional items, restricted in what the logged in user sees? in otherwords, if a restricted user is logged in and clicks on the site map, he should only be able to see those exhibits and/or groups that he has access to...

Every item and page in EE is filtered to what is allowed to current user. Make a logical structure and EE will handle all for you. Do not try to make a tree for each user, make a global tree and trust EE to do the user-specific ones.

Read http://photography-on-the.net/forum/showthread.php?t=226207

[wkitty42]

Great. I know this would be solved by giving users link permissions but I ran out of time to code that - maybe later.
ahhh, now i know what this is in reference to... i hadn't realized that the sitemap, guestbook and such links were what you were referring to... i located the links editor in the admin section and suddenly my eyes were opened...

I also see, now, that the guestbook comments do not display a photo unless it is from an exhibit the logged in user has access to... this does avoid the possibility of them seeing a photo they are not allowed to as well as avoiding them clicking on a photo and going thru some sort of forced logout routine to gain access...

yes, user permissions on links would be a good thing... if you don't already have it on the wishlist, please add it ;)

[wkitty42]

Sean, have you read this: http://photography-on-the.net/forum/showthread.php?t=223352

as noted in the above, i do get this...
You get

http://photography-on-the.net/gallery/index.php?id=rso


but not this...
and can do things like

http://www.pekkasaarinen.com/rso


how does the second one work? is that the username or the "artificial" password?

[Pekka]

wkitty42, that rso in http://www.pekkasaarinen.com/rso is just any folder name, and the hard redirect is done in server level to http://photography-on-the.net/gallery/index.php?id=rso

[wkitty42]

wkitty42, that rso in http://www.pekkasaarinen.com/rso is just any folder name, and the hard redirect is done in server level to http://photography-on-the.net/gallery/index.php?id=rso
ahh... server level redirect as in .htaccess, right?