Feature Rich: Gallery Server Pro – How to Create Secure Albums

In this post we will walk through the process of creating a secure media gallery album in Gallery Server Pro, the Open Source Media Gallery application used in Sueetie

Getting started: Creating the Sueetie Group

The Membership functions of Gallery Server Pro are integrated into Sueetie’s ASPNET Membership, so any changes made in Sueetie administration are instantly reflected in Gallery Server Pro’s permissions. We are creating a secure media gallery album for the "Sueetie Insider" group, so we will create a "SueetieInsider" role in the Sueetie Administration area and add the Sueetie Insider members to the group. Once the ASPNET Role is created in Sueetie we can create the album.

Create the Album

A bit of description about Gallery Server Pro albums. Albums are like sub-galleries, as each can contain any number of albums, or sub-galleries. GSP is quite robust, as you will quickly see once you start using it in Sueetie.

When you have sufficient permissions for a gallery or album, you will see the "Actions" button which contains your administrative functions. We’ll go ahead and Create an Album.

Creating a new Gallery Server Pro album 

Name the Album and specify its location

Creating a new Gallery Server Pro album

Set the permissions on the Album

Creating a new Gallery Server Pro album 

We want to restrict access to all Registered Users and give access to only those in the SueetieInsider role, so let’s start by restricting access for Registered Users.

Restricting Album Access by Role 

We’re enabling VIEW access to objects in all folders, but not to the Sueetie Insider Album.

Restricting Album Access by Role 

Conversely, we’re going to open up access to the Sueetie Insiders album for members in the ASPNET SueetieInsider Role. Those members will have access to the other albums because they are members of the Registered User Group. The screenshot below shows the excellent help that is built into Gallery Server Pro.

Adding Album Permissions by Role

Mark the Album as Private

One more step remains, marking the album as private. This prevents anonymous users from circumventing Gallery Server Pro’s permissions model. When in the Sueetie Insider album we’ll select the "Actions" button and "Edit Album Info" menu option.

Marking an Album Private 

You’ll notice the "Private album" checkbox at the bottom. Be sure this is checked.

Marking an Album Private

Let’s Test Album Access

As you can see, as a member of the SueetieInsider ASPNET Membership Role, the album displays on the page. Testguy Pete, on the other hand, is not a member of the SueetieInsider Role and thus cannot see the album at all.

Testing Album Access

Testing Album Access

Article written by

A long time developer, I was an early adopter of Linux in the mid-90's for a few years until I entered corporate environments and worked with Microsoft technologies like ASP, then .NET. In 2008 I released Sueetie, an Online Community Platform built in .NET. In late 2012 I returned to my Linux roots and locked in on Java development. Much of my work is available on GitHub.