starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

[Enhancement]: For security reasons, allow disabling of upload feature for books as an environment variable #2622

New Issue
Open
opened 2026-04-25 00:09:05 +02:00 by adam · 0 comments
adam commented 2026-04-25 00:09:05 +02:00
Owner
Copy Link
Copy Source

Originally created by @ZLoth on GitHub (Feb 26, 2025).

Type of Enhancement

Web Interface/Frontend

Describe the Feature/Enhancement

There should be an environment variable for ABS to disable access to the /audiobookshelf/upload page and prevent web page uploads of books.

Why would this be helpful?

As I have ABS set up, it is running on a NAS server. The upload of the books is handled by dragging the audiobook folder to the proper directory in ABS and having the file watcher scan the files. From my perspective, the File Upload feature is not needed, and I would like to disable it in the unlikely event that my account is hacked to prevent uploads as a security precaution.

The upload functionality should NOT be removed from ABS entirely as there are use cases by other administrators who use this functionality. I just want to disable it from my instance.

Future Implementation (Screenshot)

No screenshot.

Audiobookshelf Server Version

2.19.5

Current Implementation (Screenshot)

Currently, file uploads cannot be disabled.

Originally created by @ZLoth on GitHub (Feb 26, 2025). ### Type of Enhancement Web Interface/Frontend ### Describe the Feature/Enhancement There should be an environment variable for ABS to disable access to the /audiobookshelf/upload page and prevent web page uploads of books. ### Why would this be helpful? As I have ABS set up, it is running on a NAS server. The upload of the books is handled by dragging the audiobook folder to the proper directory in ABS and having the file watcher scan the files. From my perspective, the File Upload feature is not needed, and I would like to disable it in the unlikely event that my account is hacked to prevent uploads as a security precaution. The upload functionality should NOT be removed from ABS entirely as there are use cases by other administrators who use this functionality. I just want to disable it from my instance. ### Future Implementation (Screenshot) No screenshot. ### Audiobookshelf Server Version 2.19.5 ### Current Implementation (Screenshot) Currently, file uploads cannot be disabled.
adam added the enhancement label 2026-04-25 00:09:05 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label enhancement
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#2622
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?