Using Custom Permissions on a Fileset breaks Gallery Blocks
Permalink
Steps to reproduce..
Fresh install of Concrete
Turn on advanced permissions
Install a gallery (any gallery)
Create a fileset with Custom Permissions "On" and give "Guest" permission to "View" Files.
Upload some images and set the gallery to use the fileset..
All working fine until you sign out - No Gallery!
Sign back in, go to the fileset and give "Guest" permission to "Search Files in File Manager", Sign out and Gallery is now working.
For a site with multiple users each with a gallery page using their own fileset, this is a major problem because granting permission for "Guest" to "Search Files in File Manager" allows a user access to all users files!
If we add a content block with one of the images from the fileset it works as expected when signed out?
Fresh install of Concrete
Turn on advanced permissions
Install a gallery (any gallery)
Create a fileset with Custom Permissions "On" and give "Guest" permission to "View" Files.
Upload some images and set the gallery to use the fileset..
All working fine until you sign out - No Gallery!
Sign back in, go to the fileset and give "Guest" permission to "Search Files in File Manager", Sign out and Gallery is now working.
For a site with multiple users each with a gallery page using their own fileset, this is a major problem because granting permission for "Guest" to "Search Files in File Manager" allows a user access to all users files!
If we add a content block with one of the images from the fileset it works as expected when signed out?
Or, is it the image gallery addons that are using the wrong file permissions, I say this because an image from one of the users filesets that is used in a content block displays to guests just fine, whereas a gallery of images from the same fileset is not viewable to guests?
Any thoughts?