In this post we will walk through the process of creating a secure media gallery album in Gallery Server Pro, the Open Source Media Gallery application used in Sueetie
Getting started: Creating the Sueetie Group
The Membership functions of Gallery Server Pro are integrated into Sueetie’s ASPNET Membership, so any changes made in Sueetie administration are instantly reflected in Gallery Server Pro’s permissions. We are creating a secure media gallery album for the "Sueetie Insider" group, so we will create a "SueetieInsider" role in the Sueetie Administration area and add the Sueetie Insider members to the group. Once the ASPNET Role is created in Sueetie we can create the album.
Create the Album
A bit of description about Gallery Server Pro albums. Albums are like sub-galleries, as each can contain any number of albums, or sub-galleries. GSP is quite robust, as you will quickly see once you start using it in Sueetie.
When you have sufficient permissions for a gallery or album, you will see the "Actions" button which contains your administrative functions. We’ll go ahead and Create an Album.
Name the Album and specify its location
Set the permissions on the Album
We want to restrict access to all Registered Users and give access to only those in the SueetieInsider role, so let’s start by restricting access for Registered Users.
We’re enabling VIEW access to objects in all folders, but not to the Sueetie Insider Album.
Conversely, we’re going to open up access to the Sueetie Insiders album for members in the ASPNET SueetieInsider Role. Those members will have access to the other albums because they are members of the Registered User Group. The screenshot below shows the excellent help that is built into Gallery Server Pro.
Mark the Album as Private
One more step remains, marking the album as private. This prevents anonymous users from circumventing Gallery Server Pro’s permissions model. When in the Sueetie Insider album we’ll select the "Actions" button and "Edit Album Info" menu option.
You’ll notice the "Private album" checkbox at the bottom. Be sure this is checked.
Let’s Test Album Access
As you can see, as a member of the SueetieInsider ASPNET Membership Role, the album displays on the page. Testguy Pete, on the other hand, is not a member of the SueetieInsider Role and thus cannot see the album at all.