#680 Media privacy settings

[Shane]

I would like to show my family photos (media) to the
public although there is privacy settings set up for
living people. This is because many family members will
not register for an account (like elder, non-computer
savvy people), but would be happy with just viewing the
names that the public can view. This way they too can
view photos that are not of a private nature. Many of
the photos I use are not private. They are the same
photos we would post in a photo gallery, family book or
in the newspaper when they are talking about our
ancestors or current family: wedding photos, baby
photos, family photos, etc.

What I propose is a separate global privacy setting
(similar to the GEDCOM privacy settings) for media.
Globally you could choose to display media to the
public, authenticated users or admin. Authenticated
users should be determined by relationship privacy
similar to the GEDCOM privacy settings.

There will be instances that certain media would not be
shared. For example if you post legal documents or
marriage/birth/death certificates. For these situations
we could individually identify if a media item should
private or confidential (similar to setting the privacy
of facts individually). Another option would be to
allow us to decide privacy of media based off of the
media ID or the individual fact that the media is
attached to.

If a media item is shared by multiple people or family
units, but one of those people or family units require
media privacy (the media was individually set as
private for that person/family unit), then
determination of the privacy of that media item should
be made on the safe side and not displayed to the public.

The random image item on the main page would also be
affected by these privacy settings and only show photos
that are viewable by the public. That is unless you are
logged in, then you would see photos that the privacy
setting allow you to see.

Thank you … I hope this is considered, as it would be a
great addition.

[Shane]

Logged In: YES
user_id=1592567

I was using certificates as an example despite the fact that
it is still insecure to store certificates on the Internet.
There are other media that people might want kept private.
For example, scanned images of old letters. I mentioned this
here:
https://sourceforge.net/forum/message.php?msg_id=3909785

Thanks!

[lyghthouse]

Logged In: YES
user_id=1294072

I would like to support the request for a global media privacy setting with the option to select the class of user
who is allowed to see information. This would be a way for people in the UK to place copies of their certificates
of deceased relatives on line, allowing only a limted number of family members access to the certificate which
would prevent them from prosecution by placing certificates on a website accessible to all.

[Larry Meaney]

Logged In: YES
user_id=45016
Originator: NO

lyghthouse - What you are asking for can be accomplished by linking your sensitive sources to a private Repository (See http://sourceforge.net/support/tracker.php?aid=1557511 )

Then link the images to these sources and PGV will automatically hide the links to the images. To truly protect the images, you can enable the Media Firewall ( http://wiki.phpgedview.net/en/index.php/Media_Firewall )

[Larry Meaney]

Logged In: YES
user_id=45016
Originator: NO

seg78 - I believe PGV currently does everything you are asking for :)

Before showing any picture, PGV does extensive privacy checks to determine whether the current user is allowed to view an image or not. For instance, if the image is linked to a private individual or source then it is not shown. Or if an admin has marked the image private using the "Privacy Settings by ID" functionality or the RESN functionality then it is not shown.

In 4.1.2 you can actually prevent users from viewing private images (not just hide the link to them) by enabling the Media Firewall. More information about the Media Firewall and making an image private can be found here:
http://wiki.phpgedview.net/en/index.php/Media_Firewall

And, it turns out you can override PGV's desire to hide a particular image. Say you have an image that is linked to a living person - by default PGV will hide that image from unauthenticated users. But if you go to the "Edit GEDCOM privacy settings" area and then to "Privacy settings by ID", you can mark a particular media item as "Show to public". This overrides all the other privacy options and allows the general public to view the image even though it is linked to a private person.

[Shane]

Logged In: YES
user_id=1592567
Originator: YES

Thank you ljm ... I will check into this and see if it covers everything I need.

[Larry Meaney]

Logged In: YES
user_id=45016
Originator: NO

Can this be closed?