Image sufficient permissions errors

Previous topic

Install & configuration

Next topic

Author	Message
James Ward	Thursday 19 January 2006 8:44:41 am I've noticed this problem on my last two installs of ezpublish and had never seen it before. A clean install 3.7.2 does not seem to allow embedded images to be viewed. If I include an image in my articles with size set to original I receive the following message: imagename - You do not have sufficient permissions to view this object. Is this desired behaviour? Obviously I can fix this by adding permissions to the media folder in my anonymous role, I just don't understand why this is no longer the default, is there a security issue with this setup? Thanks. working at www.wardnet.com blogging at www.jamesward.ca
Łukasz Serwatka	Thursday 19 January 2006 11:26:36 pm Hi James, By default Media section is not available for public view. You can store images in media section or you can store them in folder somewhere in content tree. If you use automatic location (Media section) then you need to get read access to Image class for anonymous role by yourself. I can agree that this can be confuse and for images should be open by default. Can you please post bug report about this? Personal website -> http://serwatka.net Blog (about eZ Publish) -> http://serwatka.net/blog

Author

Message

James Ward

Thursday 19 January 2006 8:44:41 am

I've noticed this problem on my last two installs of ezpublish and had never seen it before.

A clean install 3.7.2 does not seem to allow embedded images to be viewed. If I include an image in my articles with size set to original I receive the following message:
imagename - You do not have sufficient permissions to view this object.

Is this desired behaviour? Obviously I can fix this by adding permissions to the media folder in my anonymous role, I just don't understand why this is no longer the default, is there a security issue with this setup?

Thanks.

working at www.wardnet.com
blogging at www.jamesward.ca

Łukasz Serwatka

Thursday 19 January 2006 11:26:36 pm

Hi James,

By default Media section is not available for public view. You can store images in media section or you can store them in folder somewhere in content tree. If you use automatic location (Media section) then you need to get read access to Image class for anonymous role by yourself. I can agree that this can be confuse and for images should be open by default. Can you please post bug report about this?

Personal website -> http://serwatka.net
Blog (about eZ Publish) -> http://serwatka.net/blog

eZ debug

Timing:	Jan 20 2025 14:29:46
Script start
Timing:	Jan 20 2025 14:29:46
Module start 'layout'
Timing:	Jan 20 2025 14:29:46
Module start 'content'
Timing:	Jan 20 2025 14:29:46
Module end 'content'
Timing:	Jan 20 2025 14:29:46
Script end

Main resources:

Total runtime	0.0196 sec
Peak memory usage	2,048.0000 KB
Database Queries	3

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0074	589.2891	152.6406
Module start 'layout'	0.0074	0.0036	741.9297	39.4766
Module start 'content'	0.0110	0.0064	781.4063	89.3672
Module end 'content'	0.0174	0.0022	870.7734	30.3047
Script end	0.0196		901.0781

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0025	12.8898	14	0.0002
Check MTime	0.0011	5.6532	14	0.0001
Mysql Total
Database connection	0.0015	7.4995	1	0.0015
Mysqli_queries	0.0027	13.9827	3	0.0009
Looping result	0.0000	0.1132	1	0.0000
Template Total	0.0018	9.4	1	0.0018
Template load	0.0010	4.8804	1	0.0010
Template processing	0.0009	4.4568	1	0.0009
Override
Cache load	0.0006	2.9866	1	0.0006
General
dbfile	0.0010	5.2637	8	0.0001
String conversion	0.0000	0.0511	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded	Edit	Override
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 1 Number of unique templates used: 1

Time used to render debug report: 0.0001 secs