Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non Admin Users can delete playlists if the Public toggle is enabled. #869

Open
kobayashi90 opened this issue Dec 17, 2024 · 0 comments
Open
Labels
bug Something isn't working

Comments

@kobayashi90
Copy link
Contributor

kobayashi90 commented Dec 17, 2024

Expected Behavior

Normal Users shouldnt be allowed to delete Playlist from Admins.

Current Behavior

As described in this similar thread on another Navidrome UI, people can somehow delete playlists even if you arent an admin.
See thread here: victoralvesf/aonsoku#103

If you create an Playlist like this, non admin users are able to delete playlists:
Feishin_Jmtc1gJ8Y7

And doing it like this doesnt delete the playlist:
Feishin_RfHMrTcDqm

I hope that someone can replicate this behavior as easy as i can do it..

Steps to Reproduce

See above.

Possible Solution

No response

Context

No response

Application version

v0.12.1

Operating System and version

Windows 11 Desktop

Server and Version

Navidrome v0.53.3

Node Version (if developing locally)

No response

@kobayashi90 kobayashi90 added the bug Something isn't working label Dec 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant