Media list sometimes circumvents source privacy restrictions
Brought to you by:
canajun2eh,
yalnifj
Menu
▾
▴
#1773 Media list sometimes circumvents source privacy restrictions
Some media objects linked via source citations get displayed for user classes for which privacy restrictions prevent viewing the corresponding sources. Thus, for example, it is sometimes possible for unauthenticated users to see document images linked (via source citations) to sources even though privacy settings preclude unauthenticated users from viewing sources. This occurs because, at least for GEDCOMs generated by some applications, document images can be linked either directly to a source (level 0 GEDCOM record) or via a citation of a source from a fact record subordinate to an individual or family (level 0 INDI or FAM record). The result is that the media object appears in the GEDCOM as a level 3 or higher record subordinate to a level 0 INDI or FAM. If the privacy settings permit display of the relevant individual(s), then the media object (e.g. source document) appears in media lists even though display of the source itself is denied. This is at least misleading, because one would expect that documents linked to sources would not be accessible if privacy restrictions preclude viewing the source.
Logged In: YES
user_id=1441576
Originator: YES
Following are three GEDCOM fragments which help to illustrate the issue raised here. The first fragment is part of a level 0 INDI record which includes a level 1 BIRT record with two associated level 2 SOUR citations. One citation (@S1816@) includes a level 3 OBJE media file link. The other two GEDCOM fragments are level 0 SOURC records representing the two sources cited in the first fragment. One source (@S77@) has a subordinate level 1 OBJE media file link.
In a phpGedView GEDCOM privacy configuration which requires user authentication to view sources, and given that the individual record represented (@I60@) is viewable by un-authenticated users, the observed behavior for un-authenticated users is that (1) the media object linked to @S77@ is properly excluded from the medialist, but (2) the media object included via citation of @S1816@ is included, even though the source it represents is privatized.
///////////////////////////////////////////////////////////////////////
0 @I60@ INDI
1 NAME Matt Thomas /Davis/
2 GIVN Matt Thomas
2 SURN Davis
1 SEX M
1 BIRT
2 DATE 31 JUL 1886
2 PLAC NC, USA
2 SOUR @S77@
3 QUAY 3
2 SOUR @S1816@
3 QUAY 3
3 PAGE Matt Thomas Davis, DB0, Northampton Co., NC, (5 Jun 1917)
3 OBJE
4 FORM jpg
4 FILE \WWI Draft Registrations\NC\Northampton County\DB0\Matt Thomas Davis\Registration Card A.jpg
4 TITL WWIDR - Matt Thomas Davis
4 _SCBK Y
4 _PRIM N
4 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S77@ SOUR
1 ABBR Grave Marker - Matt Thomas Davis
1 TITL Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC (US158, 0.7 mi east of Faison's Old T
2 CONC avern, GPS: 36° 26.738'N, 077° 18.669'W); Thomas Elder Davis, 15 May 20
2 CONC 05
1 _SUBQ Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC
1 _BIBL NC. Northampton Co.. Faison's Old Tavern. Matt Thomas Davis Family Ceme
2 CONC tery. Tombstone data.
1 REPO @R15@
1 OBJE
2 FORM jpg
2 FILE \Cemeteries\Davis\Matt Thomas Davis\Matt Thomas and Annie Rebecca Davis.jpg
2 TITL Tombstone - Matt Thomas and Annie Rebecca Davis
2 _SCBK Y
2 _PRIM N
2 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S1816@ SOUR
1 ABBR Ancestry.com - World War I Draft Registration Cards, 1917-1918
1 TITL Ancestry.com. <i>World War I Draft Registration Cards, 1917-1918</i> [d
2 CONC atabase on-line]. Provo, UT, USA: MyFamily.com, Inc., 2005.
1 REPO @R46@
///////////////////////////////////////////////////////////////////////
Logged In: YES
user_id=1441576
Originator: YES
Following are three GEDCOM fragments which help to illustrate the issue raised here. The first fragment is part of a level 0 INDI record which includes a level 1 BIRT record with two associated level 2 SOUR citations. One citation (@S1816@) includes a level 3 OBJE media file link. The other two GEDCOM fragments are level 0 SOURC records representing the two sources cited in the first fragment. One source (@S77@) has a subordinate level 1 OBJE media file link.
In a phpGedView GEDCOM privacy configuration which requires user authentication to view sources, and given that the individual record represented (@I60@) is viewable by un-authenticated users, the observed behavior for un-authenticated users is that (1) the media object linked to @S77@ is properly excluded from the medialist, but (2) the media object included via citation of @S1816@ is included, even though the source it represents is privatized.
///////////////////////////////////////////////////////////////////////
0 @I60@ INDI
1 NAME Matt Thomas /Davis/
2 GIVN Matt Thomas
2 SURN Davis
1 SEX M
1 BIRT
2 DATE 31 JUL 1886
2 PLAC NC, USA
2 SOUR @S77@
3 QUAY 3
2 SOUR @S1816@
3 QUAY 3
3 PAGE Matt Thomas Davis, DB0, Northampton Co., NC, (5 Jun 1917)
3 OBJE
4 FORM jpg
4 FILE \WWI Draft Registrations\NC\Northampton County\DB0\Matt Thomas Davis\Registration Card A.jpg
4 TITL WWIDR - Matt Thomas Davis
4 _SCBK Y
4 _PRIM N
4 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S77@ SOUR
1 ABBR Grave Marker - Matt Thomas Davis
1 TITL Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC (US158, 0.7 mi east of Faison's Old T
2 CONC avern, GPS: 36° 26.738'N, 077° 18.669'W); Thomas Elder Davis, 15 May 20
2 CONC 05
1 _SUBQ Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC
1 _BIBL NC. Northampton Co.. Faison's Old Tavern. Matt Thomas Davis Family Ceme
2 CONC tery. Tombstone data.
1 REPO @R15@
1 OBJE
2 FORM jpg
2 FILE \Cemeteries\Davis\Matt Thomas Davis\Matt Thomas and Annie Rebecca Davis.jpg
2 TITL Tombstone - Matt Thomas and Annie Rebecca Davis
2 _SCBK Y
2 _PRIM N
2 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S1816@ SOUR
1 ABBR Ancestry.com - World War I Draft Registration Cards, 1917-1918
1 TITL Ancestry.com. <i>World War I Draft Registration Cards, 1917-1918</i> [d
2 CONC atabase on-line]. Provo, UT, USA: MyFamily.com, Inc., 2005.
1 REPO @R46@
///////////////////////////////////////////////////////////////////////
Logged In: YES
user_id=1441576
Originator: YES
Following are three GEDCOM fragments which help to illustrate the issue raised here. The first fragment is part of a level 0 INDI record which includes a level 1 BIRT record with two associated level 2 SOUR citations. One citation (@S1816@) includes a level 3 OBJE media file link. The other two GEDCOM fragments are level 0 SOURC records representing the two sources cited in the first fragment. One source (@S77@) has a subordinate level 1 OBJE media file link.
In a phpGedView GEDCOM privacy configuration which requires user authentication to view sources, and given that the individual record represented (@I60@) is viewable by un-authenticated users, the observed behavior for un-authenticated users is that (1) the media object linked to @S77@ is properly excluded from the medialist, but (2) the media object included via citation of @S1816@ is included, even though the source it represents is privatized.
///////////////////////////////////////////////////////////////////////
0 @I60@ INDI
1 NAME Matt Thomas /Davis/
2 GIVN Matt Thomas
2 SURN Davis
1 SEX M
1 BIRT
2 DATE 31 JUL 1886
2 PLAC NC, USA
2 SOUR @S77@
3 QUAY 3
2 SOUR @S1816@
3 QUAY 3
3 PAGE Matt Thomas Davis, DB0, Northampton Co., NC, (5 Jun 1917)
3 OBJE
4 FORM jpg
4 FILE \WWI Draft Registrations\NC\Northampton County\DB0\Matt Thomas Davis\Registration Card A.jpg
4 TITL WWIDR - Matt Thomas Davis
4 _SCBK Y
4 _PRIM N
4 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S77@ SOUR
1 ABBR Grave Marker - Matt Thomas Davis
1 TITL Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC (US158, 0.7 mi east of Faison's Old T
2 CONC avern, GPS: 36° 26.738'N, 077° 18.669'W); Thomas Elder Davis, 15 May 20
2 CONC 05
1 _SUBQ Matt Thomas Davis tombstone, Matt Thomas Davis Family Cemetery, Faison'
2 CONC s Old Tavern, Northampton Co., NC
1 _BIBL NC. Northampton Co.. Faison's Old Tavern. Matt Thomas Davis Family Ceme
2 CONC tery. Tombstone data.
1 REPO @R15@
1 OBJE
2 FORM jpg
2 FILE \Cemeteries\Davis\Matt Thomas Davis\Matt Thomas and Annie Rebecca Davis.jpg
2 TITL Tombstone - Matt Thomas and Annie Rebecca Davis
2 _SCBK Y
2 _PRIM N
2 _TYPE PHOTO
///////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////
0 @S1816@ SOUR
1 ABBR Ancestry.com - World War I Draft Registration Cards, 1917-1918
1 TITL Ancestry.com. <i>World War I Draft Registration Cards, 1917-1918</i> [d
2 CONC atabase on-line]. Provo, UT, USA: MyFamily.com, Inc., 2005.
1 REPO @R46@
///////////////////////////////////////////////////////////////////////