ISSUE SUMMARY:
Member of a closed group posts a photo to the group. Photo is not shown in public stream, however, the photo is accessible by viewing all albums on the site via the photos module. Clicking on All Albums shows photos from all groups, closed or public.

STEPS TO REPLICATE:
1 Create or join a closed group
2 Post a photo to the closed group
3 Log into site as a different user, which is not a member of the group
4 Click on View All photos in the photos module or via the navigation bar
5 View the closed group's photos in an album

RESULT
Closed group photos are viewable from the photos section
EXPECTED RESULT
Only members of the group should see the photos from the closed group
BROWSER
All

Hi,

This is abug.. thank you for reporting.

cheers.

Just in case anyone else sees this, the 4.0.5 update has the same issue.

Hi John,

this issue is not be fixed in version 4.0.5, I will let you know once this issue already fixed.

thank you

for fixing this open this file components/com_community/views/photos/view.html.php, find this code :

$albumHTML = $this->_getAllAlbumsHTML($albumsData['data'], $type, $albumsData['pagination']);

foreach ($albumsData['data'] as $album) {
                if($album->type == "group"){

                    $group = JTable::getInstance('Group', 'CTable');
                    $group->load($album->groupid);

                    if($group->approvals == 1 ){
                        if($group->isMember($my->id))
                            $albumList[] = $album;
                    } else {
                        $albumList[] = $album;
                    }
                } else {
                    $albumList[] = $album;
                }
            }

            $albumHTML = $this->_getAllAlbumsHTML($albumList, $type, $albumsData['pagination']);

The edit suggested above results in a blank page when navigating to the Photos section.

Parse error: syntax error, unexpected end of file in /home/sectorgr/public_html/components/com_community/views/photos/view.html.php on line 1

Hi John,

What is the FTP access? I will check it.

thank you

My apologies, I thought I included the info. I have edited the first post to include FTP login information. Likewise, we utilize Phoca Commander (under Components menu in admin) to manage site files.

hi John,

please you check again, I just updated the file.

thank you

All is good there, thank you!