photos icon indicating copy to clipboard operation
photos copied to clipboard

Allow/Enforce the same password and expiration requirements on Public Album links

Open ACiDGRiM opened this issue 2 years ago • 6 comments

Is your feature request related to a problem? Please describe. I am totally in love with the Albums feature, this is what I have been waiting for a very long time. One issue I have is that there is not an option to password protect and set expiration dates on public Album links.

Describe the solution you'd like Primarily: I would like to be able to create multiple links,with different passwords/no password/expiration dates, just like I can for sharing files and folders. Also important: I would also like to share the album to other Nextcloud users as read-only, rather than allowing them to collaborate. Finally, not so important: I would like to allow certain links to have permission to upload files from people with the link/password without a nextcloud account, saving the files into a pre-determined location.

Describe alternatives you've considered This is a new feature, so I don't believe there are any alternatives, other than the existing option to share a folder with copies of media. However this loses the benefit of not having to create multiple copies of the same picture for different folders, whereas the Albums can share the same picture file across multiple collections.

Additional context The only option for the public link available is to disable and create a new link.

ACiDGRiM avatar Jan 02 '23 04:01 ACiDGRiM

I would really like to throw my vote in on this one.

I just spent the last several hours digging through all my settings and searching online trying to figure this out. The feature is so obvious I assumed something was configured wrong or it was a bug.

Synology Photos has been able to do this for over a decade! But I am trying so hard to get off of Synology's proprietary apps.

Is there any timeline at all for this being addressed? For my use case this is a show stopping issue.

relink2013 avatar May 01 '23 13:05 relink2013

For default links (non album links) it's also possible to disable download buttons. It would be good, if public album links would support this feature as well. See also: https://nextcloud.com/de/blog/secure-view-prevent-your-shared-files-from-getting-downloaded/

marcopenhacking avatar Aug 28 '23 07:08 marcopenhacking

I only can repeat @relink2013 : "I just spent the last several hours digging through all my settings and searching online trying to figure this out. The feature is so obvious I assumed something was configured wrong or it was a bug."

The sharing-function is useless without the ability of setting up a password-function. And of course there must also be the possibility to edit the sharing, like delete the share, setup an vanish-date, grant rights and so on.

IeP4nieF avatar Oct 28 '23 09:10 IeP4nieF

I must bump this feature request.

Obviously, sharing an album of an event with family and friends without being able to password protect it is simply a no go. We can not create accounts for every one just for a one time share.

Greetings,

CAberry avatar Feb 02 '24 20:02 CAberry

I agree. Password protect in shared public links for albums should be a must nowadays (in the same way it is for folders). I love the posibility of sharing albums with family (just with selected photos), but I don't do it because I fear the link may accidentally fall into the wrong hands.

Is this feature in the roadmap? It would be amazing to have it.

darguez avatar May 24 '24 08:05 darguez

Curious thing is the workaround of placing this code in nextcloud .htaccess to force Apache2 to ask for a password when accessing shared albums links returns a nextcloud Error page (401) after entering valid credentials.

<If "%{REQUEST_URI} =~ m#^/index.php/apps/photos/public/#">
    AuthUserFile /etc/apache2/.htpasswd
    AuthName "Password protected"
    AuthType Basic
    Require valid-user
</If>

Important:

To generate a user/pass you I used sudo htpasswd -c /etc/apache2/.htpasswd username

And I had to set AllowOverrride to All instead None in /etc/apache2/apache2.conf

<Directory /var/www/>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

Apache2 restart is also required after conf changes: sudo systemctl restart apache2.service

darguez avatar Jun 16 '24 12:06 darguez