When a photo albums (or photo) privacy is set to 'friends only' and someone comment on it inside the activity stream, everything seems to work normal - because no activity for this annotation is created..

But - if a friend goes directly to the album or photo and comment on it there, there will be an activity created.
This activity shows up in the activities stream.
Within this activity entry in the stream, the album cover or photo is displayed to anybody - ignoring the privacy settings of the album or photo.

I know that I can deactivate comment activites showing up in the activities stream by unpublishing it in the user points area - which I already did.
But I don't think the described behavior is desired.?

Hi.

On activity stream is posted not album then but that comment... then rules to comments apply not album privacy settings, as on stream is not album itself.

If you think that this feature should be redesigned, please, post your idea here:
uservoice.jomsocial.com/forums/101561-feature-request

Thanks for the quick reply.

I understand why this happens.

Even if it makes no sense to show comments on private content to anybody, I don't think this is a feature design issue.

To ignore the privacy settings of user content INSIDE the activity is a flaw in this part of the software.
If not - the photos would be also shown in the normal activity - which will be created when someone uploads the photos or create an album.

But in this cases the activity will be shown to anybody - but the content itself is restricted to (in this case) friends only.

Hi.

I tested this issue on my test site.

User michal is friend of user test6 but not user jomsocial.
User michal has an album for fiends only and the same privacy settings toward photos.
User test6 add a comment right under one photo.
There is activity post on stream.
But when user jomsocial logs in - he can't see that activity.

Could you check if this work the same way on your site?

I can give you account credentials so you could see it on my test site.

Unfortunately it isn't.

If it would be this way, I wouldn't posted a forum thread to begin with ;-)

on our test sites it works the way I described.

you can check yourself with the 3 user test accounts I added in my first post (tester, tester1 and tester2).
As I tested it again 2 minutes ago - you can log in as tester2 and see that the activity with the photo upload from tester doesn't show the picture to user tester2, but the comment activity of tester1 on tester's photo shows it within the activity.

HI.

It's because you've set "Activity Display Privacy" to NO in Backend -> Components -> JomSocial -> Configuration -> Site -> Activity (box).

If this setting is nNO, then all activity are PUBLIC, if YES then it follows user privacy settings.
Now user tester2 can't see activities of tester1 - comment on photo from album testers.