[Bug]: Unable to remove from collection #2552

Closed
opened 2026-04-25 00:08:19 +02:00 by adam · 1 comment
Owner

Originally created by @k3davis on GitHub (Feb 7, 2025).

What happened?

Granted the permissions aren't super granular and it's hard to tell exactly what's going on, but a user with pretty extensive but not admin rights can add items to collections, and can see the option to remove them if they add one in error, but that option returns a 403 Forbidden error.

Image

What did you expect to happen?

This is unexpected (at least from a user standpoint); the option to remove should either work or not be visible if that is for some reason intentional.

Steps to reproduce the issue

  1. Create user with permissions as shown in screenshot
  2. Add an item to a collection (works fine)
  3. Attempt to remove the item from the collection (fails)

Audiobookshelf version

v2.19

How are you running audiobookshelf?

Docker

What OS is your Audiobookshelf server hosted from?

Other (list in "Additional Notes" box)

If the issue is being seen in the UI, what browsers are you seeing the problem on?

Other (list in "Additional Notes" box)

Logs

Request URL:
http://<myserver>:4040/audiobookshelf/api/collections/4d5bb047-5671-4501-b4e4-17a33dd42513/book/af2111d8-e098-4a50-b3b9-b46d586ff9bc
Request Method:
DELETE
Status Code:
403 Forbidden

Additional Notes

Running on Synology NAS. Visible in Chrome and Firefox. Issue existed prior to my upgrading to v2.19.

Originally created by @k3davis on GitHub (Feb 7, 2025). ### What happened? Granted the permissions aren't super granular and it's hard to tell exactly what's going on, but a user with pretty extensive but not admin rights can add items to collections, and can see the option to remove them if they add one in error, but that option returns a 403 Forbidden error. ![Image](https://github.com/user-attachments/assets/9ad000c6-b701-439c-a3be-b708284543b3) ### What did you expect to happen? This is unexpected (at least from a user standpoint); the option to remove should either work or not be visible if that is for some reason intentional. ### Steps to reproduce the issue 1. Create user with permissions as shown in screenshot 2. Add an item to a collection (works fine) 3. Attempt to remove the item from the collection (fails) ### Audiobookshelf version v2.19 ### How are you running audiobookshelf? Docker ### What OS is your Audiobookshelf server hosted from? Other (list in "Additional Notes" box) ### If the issue is being seen in the UI, what browsers are you seeing the problem on? Other (list in "Additional Notes" box) ### Logs ```shell Request URL: http://<myserver>:4040/audiobookshelf/api/collections/4d5bb047-5671-4501-b4e4-17a33dd42513/book/af2111d8-e098-4a50-b3b9-b46d586ff9bc Request Method: DELETE Status Code: 403 Forbidden ``` ### Additional Notes Running on Synology NAS. Visible in Chrome and Firefox. Issue existed prior to my upgrading to v2.19.
adam added the bug label 2026-04-25 00:08:19 +02:00
adam closed this issue 2026-04-25 00:08:19 +02:00
Author
Owner

@github-actions[bot] commented on GitHub (Feb 12, 2025):

Fixed in v2.19.1.

@github-actions[bot] commented on GitHub (Feb 12, 2025): Fixed in [v2.19.1](https://github.com/advplyr/audiobookshelf/releases/tag/v2.19.1).
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#2552