I noticed something related to URL (not a bug) during testing, check it here -
Login to demoz and then paste this URL in your browser:
http://demozzz.com/dolphin7b/m/videos/albums/my/add_objects/any_album_name/owner/any_user_name
And upload a video and Dolphin successfully create's a new album with the name "any_album_name" and uploads the video. Not sure how this would behave with permissions but personally I think we should restrict users to create albums using URLs.
What do you say guys?