[Tikiwiki-devel] Problem with File galleries and object permission in Tiki 4.2

[Rodrigo S. P. <rod...@gm...>]

Hi, I'm setting up a Tiki which is basically a set of file galleries with
permission control for each gallery. We have approximately twenty galleries
and each gallery has three user groups (reader, author and editor). I'm
having multiple problems with the permissions control.

To test, in a fresh 4.2 install I created a group named "authors" with no
global permission and a user named "author" who belongs to this group. Then
I created a file gallery and gave to the authors group the permissions
tiki_p_upload_files, tiki_p_list_file_galleries, tiki_p_view_file_gallery
and tiki_p_download_files only on this gallery. Also I uploaded a file to
the gallery using the admin user.

The "author" user is able to see the gallery but not its contents. In other
words, he can see the gallery page (instead of a permission denied page) but
not the files that belongs to this gallery. The table that list the files is
empty with a "No records found message". Even if I gave all the file gallery
related permissions to this user in this gallery he is unable to see the
files. The "author" user has the permission to upload files to the gallery
and is able to do so. But he is unable to see even the files uploaded by
himself.

Am I missing something? Has anyone experienced anything similar in 4.2
version or in other versions?

Tomorrow I hope to have some time to look at the code and try to understand
what is happening.

Thanks, Rodrigo.