starred/audiobookshelf
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf.git synced 2026-05-30 23:40:40 +02:00
Code Issues 1.0k Packages Projects Releases 10 Wiki Activity

[Bug]: Guest/User account types have ability to view/edit/delete collections for everyone #615

New Issue
Closed
opened 2026-04-24 23:14:42 +02:00 by adam · 2 comments
adam commented 2026-04-24 23:14:42 +02:00
Owner
Copy Link
Copy Source

Originally created by @endangered-maritime-walrus on GitHub (Aug 30, 2022).

Describe the issue

Both Guests and Users have the ability to view, but more importantly, edit/delete items and/or entire collections.

Ideally, there would be a way to make a collection completely private.

Steps to reproduce the issue

  1. Create Collection in Admin account
  2. Create User/Guest
  3. Log in as User/Guest
  4. Go to collections
  5. Reorder, delete book from collections, or delete entire collection

Audiobookshelf version

v2.1.4

How are you running audiobookshelf?

Docker

Originally created by @endangered-maritime-walrus on GitHub (Aug 30, 2022). ### Describe the issue Both Guests and Users have the ability to view, but more importantly, edit/delete items and/or entire collections. Ideally, there would be a way to make a collection completely private. ### Steps to reproduce the issue 1. Create Collection in Admin account 2. Create User/Guest 3. Log in as User/Guest 4. Go to collections 5. Reorder, delete book from collections, or delete entire collection ### Audiobookshelf version v2.1.4 ### How are you running audiobookshelf? Docker
adam added the bug label 2026-04-24 23:14:42 +02:00
adam closed this issue 2026-04-24 23:14:42 +02:00
adam commented 2026-04-24 23:14:43 +02:00
Author
Owner
Copy Link
Copy Source

@advplyr commented on GitHub (Aug 30, 2022):

I completely missed this somehow. Originally collections were going to be per-user then we decided to add "playlists" in the future that will be per-user.
In this case I think collections should only be editable/deleted by admin users, but everyone on the server will be able to view collections.
Playlists will essentially be collections but private per-user.

@advplyr commented on GitHub (Aug 30, 2022): I completely missed this somehow. Originally collections were going to be per-user then we decided to add "playlists" in the future that will be per-user. In this case I think collections should only be editable/deleted by admin users, but everyone on the server will be able to view collections. Playlists will essentially be collections but private per-user.
adam commented 2026-04-24 23:14:43 +02:00
Author
Owner
Copy Link
Copy Source

@advplyr commented on GitHub (Sep 5, 2022):

Fixed in v2.1.5

@advplyr commented on GitHub (Sep 5, 2022): Fixed in [v2.1.5](https://github.com/advplyr/audiobookshelf/releases/tag/v2.1.5)
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
authentication
backlog
bug
chapter editor
config-issue
ebooks
encoding/embedding
enhancement
help wanted
listening sessions & progress
planned
possible plugin
progress sync
pull-request
Mirrored from GitHub Pull Request
 sorting/filtering/searching
unable to reproduce
upload
users & permissions
waiting
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf#615
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?