Why test direct image access in addition to the wedding gallery page?
Page controls can hide a photo while its storage URL remains accessible. Test the underlying read path to verify the intended privacy policy actually holds.
Explore This Question
Search for additional explanations using these tools:
More FAQs in What tests should be performed on photo uploading, viewing, and deletion?
The application needs a recoverable state and retry strategy that reconciles the record with storage. It should not leave an unexplained broken card indefinitely.
That scenario verifies isolation between families. An authenticated user must not gain access to another wedding's private photos by changing identifiers or requesting direct image URLs.
Still have questions?
Browse all our FAQs or reach out to our support team