Php photo gallery TWG | JFUploader | TWG Flash upload | WFU | Forum
https://www.tinywebgallery.com/forum/

Definition of user access restrictions
https://www.tinywebgallery.com/forum/viewtopic.php?f=4&t=3411
Page 1 of 1

Author:  c.monty [ 13. Sep 2012, 17:04 ]
Post subject:  Definition of user access restrictions

Hello!

I'm very concerned about security and abuse of this webservice. Maybe I'm too concerned, but this should not be discussed in this thread.

OK, my webserver Nginx is running on Raspberry Pi, and therefore I decided to choose software with less resource requirement.

However, I would like to define at least the following access restrictions:
1. Only "registered" users can access the WebUI of TWG, means the users get kind of a logon screen to enter the personlized user credentials, and only after validation they can access the library.
2. Registered users can only access folders for which they have the permission to.
3. Users can only view pictures in the WebUI, they cannot modify and certainly not download the pictures, but only give comments (and ratings).

Which restrictions can be applied to TWG?

THX

Author:  TinyWebGallery [ 15. Sep 2012, 12:46 ]
Post subject:  Re: Definition of user access restrictions

1 and 2

Images can always be downloaded. Simply make a screenshot or use and e.g. Firefox extension like webdeveloper.
comments can be restricted to registered users only but if only registered users have access this does not mattef.

Best Michael

Author:  c.monty [ 17. Sep 2012, 09:53 ]
Post subject:  Re: Definition of user access restrictions

OK, thanks.

Can you provide some input how to realize point 1 and 2?

THX

Author:  TinyWebGallery [ 18. Sep 2012, 11:21 ]
Post subject:  Re: Definition of user access restrictions

See the howto http://www.tinywebgallery.com/en/faq.php#h12

1 is the global protection
2 is the user based galleries.

Best, Michael

Page 1 of 1 All times are UTC + 1 hour [ DST ]
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/