Description

When:

1. using ACLs in a page which prevent read access to unauthenticated users,
2. using ACLs in the config file which, for your login id, override the inline ACLs and allow you all access,

3. using Gallery2 and not providing a list of images (i.e. to mean all attached images)

then clicking on a thumbnail does not show an image! ...

... but clicking the forward and back buttons provided by Gallery2 then does show the image!

Steps to reproduce

1. Set up the following wiki-wide ACLS:

   acl_rights_before  = u'AdminGroup:read,write,admin,delete,revert'
   acl_rights_after   = u'All:read'
   acl_rights_default = u'EditorGroup:read,write,delete,revert'

2. Create a new page containing only:

   #acl Default All:
   #!Gallery2 show_text=0,show_date=0,show_tools=0,border_thick=0,columns=5,webnail_width=800

3. Ensure you are logged into the wiki and are in AdminGroup.

4. Attach several JPGs to it; Gallery2 will correctly generate a page of thumbnails for all the attached images.
5. Click on one of the images. No image is shown!
6. Click Gallery2's forward and back buttons and the desired image is now shown!

Example

I have a page which displays this problem, but since the bug is only exhibited when the ACL in the page denies you read access to the page, there is no point in telling you the URL. (It is http://dione.no-ip.org/AlexisWiki/Gallery/2007/52 but you cannot access this.)

My wiki's config file contains the following ACL related settings:

    acl_rights_before  = u'AdminGroup:read,write,admin,delete,revert'
    acl_rights_after   = u'All:read'
    acl_rights_default = u'EditorGroup:read,write,delete,revert'

My image page contains:

#acl Default All:
{{{
#!Gallery2 show_text=0,show_date=0,show_tools=0,border_thick=0,columns=5,webnail_width=800
}}}
----
CategoryGallery

I have one image attached.

And here is the page of thumbnails:

screenshot-1.png

Here I click on the image and no image is shown:

screenshot-2.png

Finally I click the forward button (no need to click also back in this case as the page only has one attachment) and the image displays correctly:

screenshot-3.png

Component selection

My guess is that this is caused by some Gallery2 somehow (directly or by delegation) incorrectly assuming that the inline ACL means that the attachment is not readable, when actually it is.

Clearly it involves a route through the code that is different to that that is followed when the forward/back buttons are pressed; because when they are pressed the image is displayed.

Details

Workaround

Click the Gallery2 forward and back buttons.

Discussion

I did submit this bug to the old moinmoin.wikiwikiweb.de Gallery2 page, but it was around the time of the migration to moinmo.in and I think my bug report got lost. I waited four months to see if it would appear on moinmo.in, but it hasn't, and it is my assumption that it was simply lost, hence this reposting.

(Incidentally, even once logged into moinmo.in wiki, I am still not allowed to subscribe to this page. What gives?).

Sorry I missed it. Please can you describe the settings of surge protection and the minor version number of the plugins you used. -- ReimarBauer 2008-04-14 07:51:04

Surge protection has:

lasagne$ grep -i surge AlexisWiki.py
    surge_action_limits = { } 
lasagne$ 

For Gallery2, the last entry in the 'MODIFICATION HISTORY' is

2006-08-22 1.5.4-18 RB for the call of Frame a test if parameters are submitted is added (backport from 1.6.0-18 

For gallery2image it's

2006-08-11 1.5.4-14 RB bug fixed webf and thumbf changed to tmp. prefix always 

-- AlexisHuxley 2008-05-16 16:49:00

I think this was fixed by gallery2image-1.5.6-16.py. -- ReimarBauer 2008-05-20 15:57:56

Plan

• Priority:
• Assigned to:
• Status:

CategoryMoinMoinBug