• Welcome to the Chevereto user community!

    Here users from all over the world gather around to learn the latest about Chevereto and contribute with ideas to improve the software.

    Please keep in mind:

    • 😌 This community is user driven. Be polite with other users.
    • 👉 Is required to purchase a Chevereto license to participate in this community (doesn't apply to Pre-sales).
    • 💸 Purchase a Pro Subscription to get access to active software support and faster ticket response times.

Admin user as user (Privacy)

Status
Not open for further replies.

TGS

Chevereto Member
I've noticed that in 3.7.2 there is a section in the admin dashboard to view all images/albums. I would like to propose that given that fact, normal admin navigation of the site is treated as though they are normal users. Which means when they explore, if there are images they wouldn't normally see. They don't see it. Inaccessible images are inaccessible.

I've noticed just in tinkering on my own site that admins can see everything through normal navigation of the site. Not considering any privacy settings what so ever. While it makes perfect sense to allow admins this level of purview, it does not necessarily make sense that this is the default position. As an admin if you're navigating the site like a user you shouldn't see everything. You should essentially be, a user. No more, no less. If you wish to use your admin privileges and thus see things you aren't normally entitled to see, or delete things that should be done through the admin dashboard and/or have an 'administer' link on each image that naturally isn't yours that then opens up the ability to delete/modify/etc. Or even have that 'administer' link simply take you to the image via the dashboard. That way the dashboard is the method for administering content.
 
Yeah, I don't like this at all. I want to view everything within my normal navigation. I'm the admin... I know I'm seeing it as an admin... Why would you need to see things as a user? Set up a secondary non-admin account...
 
Yeah, I don't like this at all. I want to view everything within my normal navigation. I'm the admin... I know I'm seeing it as an admin... Why would you need to see things as a user? Set up a secondary non-admin account...

I have setup a secondary non-admin account. But is that really the system that makes the most sense? Forcing people to have secondary accounts to browse it in the same capacity that a normal user would?

If that is the intended setup, I'm not sure why there would be a dashboard specific navigation. Personally that part of the suggestion was just intended to use what is already there. A separate system could be made to serve this functionality just as easily. There could be a button available for admins to 'toggle' their admin viewing on/off.

I've been running things as admin for a very very long time now and it is almost always preferable to have a system by which admins 'activate 'their privileges rather than having them always on by default. That is why on Linux you don't run your normal things on root. It just makes common sense. On some systems such as forums it doesn't matter that much because your administrative actions have to be initiated by you. You can't 'accidentally' invoke an administrative ability. In Chevereto on the other hand there aren't a great deal of administrative functions. The only three are visibility (seeing things that you might not otherwise see) editing (editing things that you might not otherwise be able to edit) and deleting (deleting things that are not yours to delete).

I'm not saying this functionality shouldn't exist. I'm saying that it might be an idea to have the ability to turn it off as an admin and turn it on when you need it. Personally the kind of site I'm aiming to have I intend to respect peoples privacy as best I can. Which is exactly why I DO intend to navigate through a normal user most of the time. With the occasional admin login to check to make sure nothing bad has been put on.
 
That is why on Linux you don't run your normal things on root.
This is a terrible comparison... Not running things as root is, at it's core, security. Your suggestion has nothing to do with security, its more of personal preference.

You say there are only three things you get while an admin... so how does it really make difference?

There is a notification on the image thumbnail of images that are hidden so what's the big deal seeing them?

Chancing of accidental editing and deleting things is pretty slim and the tools for them are hardly in the way and noticeable.

Chev comes with theme management. You're capable of editing out a lot of the tools if they're bothering you. Nothing about Chev is different than any other major software. Forums, most image hosting programs, ecommerce programs, and even some CMS systems allow you to have some admin tools in the background and then have admin only seen features.
 
This is a terrible comparison... Not running things as root is, at it's core, security. Your suggestion has nothing to do with security, its more of personal preference.

You say there are only three things you get while an admin... so how does it really make difference?

There is a notification on the image thumbnail of images that are hidden so what's the big deal seeing them?

Chancing of accidental editing and deleting things is pretty slim and the tools for them are hardly in the way and noticeable.

Chev comes with theme management. You're capable of editing out a lot of the tools if they're bothering you. Nothing about Chev is different than any other major software. Forums, most image hosting programs, ecommerce programs, and even some CMS systems allow you to have some admin tools in the background and then have admin only seen features.
I'm curious as to what exactly your issue is with the suggestion other than perhaps inconvenience?

I could be wrong but I view this as largely a privacy issue. Most websites with concepts of privacy do not give moderators/administrators DEFAULT access to that information. That isn't to say you can't have access. Just that it isn't always-on. A simple toggle or option to 'block' default access through navigation (thus requiring the admin to go through the dashboard) would be a good addition I think.

Admins should most definitely have access to all of the images without fail. The difference and the purpose of this suggestion is to protect peoples privacy with regards to private pictures/albums. Anyone posting on a site should know that the admins will have access to the content. That's basic Internet knowledge. The difference is as I see it whether or not the admins will see it just in regular navigation without any actual expectation of administering. E.g I login to my admin account, see what has been going on with the site as a user... oh but wait I see EVERYTHING. Even things people post privately. I don't want to do that, I was viewing the site as a user. I had no intention of administering anything I just wanted to see what public content has been posted.

Yes, you're right. Make a regular user account. That's exactly what I've done. But I'm curious as to whether or not that is intended design by the developer or if what I'm saying actually makes sense.

To be honest though, regardless of whether or not anything I suggest is included where applicable it should be optional. The relative time suggestion? No point making that optional. This on the other hand? Very much needs to be optional. That way it wouldn't affect you at all. Just turn it off.
 
I've found that is somehow annoying when I'm browsing the demo and suddenly I'm stumbled with private images that shouldn't be there (hardcore porn and stuff like that) and the next thing that I do is repeat to myself "Damn I hate to see those from time to time" and how cool it will be to don't see those when I'm showing the demo to relatives or someone in the family.

Next thing that I remember is that I'm an admin and what I've to do. That said, having all there in front of my eyes is the most remarkable way to keep the website moderated and that is the reason why listings are overriden when you are an administrator.

I have a spare account that sort of revokes the admin powers and allows me to browse the demo as a normal user.

I don't see the point in being half admin, is way better full admin + normal user. At least that's my opinion.

If someone else wants to add something to this thread please go ahead.
 
I've found that is somehow annoying when I'm browsing the demo and suddenly I'm stumbled with private images that shouldn't be there (hardcore porn and stuff like that) and the next thing that I do is repeat to myself "Damn I hate to see those from time to time" and how cool it will be to don't see those when I'm showing the demo to relatives or someone in the family.

Next thing that I remember is that I'm an admin and what I've to do. That said, having all there in front of my eyes is the most remarkable way to keep the website moderated and that is the reason why listings are overriden when you are an administrator.

I have a spare account that sort of revokes the admin powers and allows me to browse the demo as a normal user.

I don't see the point in being half admin, is way better full admin + normal user. At least that's my opinion.

If someone else wants to add something to this thread please go ahead.

yes this also the way I think.
 
I've found that is somehow annoying when I'm browsing the demo and suddenly I'm stumbled with private images that shouldn't be there (hardcore porn and stuff like that) and the next thing that I do is repeat to myself "Damn I hate to see those from time to time" and how cool it will be to don't see those when I'm showing the demo to relatives or someone in the family.

Next thing that I remember is that I'm an admin and what I've to do. That said, having all there in front of my eyes is the most remarkable way to keep the website moderated and that is the reason why listings are overriden when you are an administrator.

I have a spare account that sort of revokes the admin powers and allows me to browse the demo as a normal user.

I don't see the point in being half admin, is way better full admin + normal user. At least that's my opinion.

If someone else wants to add something to this thread please go ahead.

Yeah I've actually found myself pretty much using my non-admin account by default and only logging into my admin account when I need to check to make sure nothing troublesome is being posted so I suppose you can close/reject this suggestion if you want.
 
Status
Not open for further replies.
Back
Top