gitea-mirror/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-07-28 14:47:30 -07:00
Code Issues Packages Projects Releases Wiki Activity

fix: search statistics locked folder permissions (#30063)

Browse Source 
fix; search statistics locked folder permissions
This commit is contained in:
Daniel Dietzler
2026-07-20 20:08:42 -04:00
committed by GitHub
parent 4c754f2999
commit 77091b0107
2 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/src/services/search.service.ts
+1 -1
View File
@@ -100,7 +100,7 @@ export class SearchService extends BaseService {
}
async searchStatistics(auth: AuthDto, dto: StatisticsSearchDto): Promise<SearchStatisticsResponseDto> {
const userIds = await this.getUserIdsToSearch(auth);
const userIds = await this.getUserIdsToSearch(auth, dto.visibility);
if (dto.visibility === AssetVisibility.Locked) {
requireElevatedPermission(auth);
}
server/test/medium/specs/services/search.service.spec.ts
+16
View File
@@ -89,6 +89,22 @@ describe(SearchService.name, () => {
expect(result).toEqual({ total: 0 });
});
it('should not return locked assets of partner in elevated session', async () => {
const { sut, ctx } = setup();
const { user } = await ctx.newUser();
const { user: partner } = await ctx.newUser();
await ctx.newPartner({ sharedById: partner.id, sharedWithId: user.id });
await ctx.newAsset({ ownerId: partner.id, visibility: AssetVisibility.Locked });
const auth = factory.auth({ user: { id: user.id }, session: { hasElevatedPermission: true } });
const result = await sut.searchStatistics(auth, { visibility: AssetVisibility.Locked });
expect(result).toEqual({ total: 0 });
});
});
describe('withStacked option', () => {