Inconsistent permissions for albums
Submitted Sonya*, Jan 31 2012 02:11 PM | Last updated Jan 31 2012 02:11 PM
Create two groups of members: Members and VIP
Allow VIP to create member's private albums.
Do not allow Members to create any albums (neither public, nor private).
Create private member album "Friends only" as VIP.
As administrator change the group of VIP member to Members.
Result: Former VIP member can open his album and edit it, upload images into it even as a Member he has not permission to have an album.
Desired: Do not allow members without own album permission edit albums or upload images into it.
Allow VIP to create member's private albums.
Do not allow Members to create any albums (neither public, nor private).
Create private member album "Friends only" as VIP.
As administrator change the group of VIP member to Members.
Result: Former VIP member can open his album and edit it, upload images into it even as a Member he has not permission to have an album.
Desired: Do not allow members without own album permission edit albums or upload images into it.
| Status: | Not a Bug |
| Version: | |
| Fixed In: |
1 Comments