helpy4/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich synced 2026-08-15 13:03:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: search statistics locked folder permissions (#30063)

Browse source 
fix; search statistics locked folder permissions
This commit is contained in:
Daniel Dietzler 2026-07-21 02:08:42 +02:00 • committed by GitHub
parent 4c754f2999
commit 77091b0107
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 17 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
server/src/services/search.service.ts
View file

@ -100,7 +100,7 @@ export class SearchService extends BaseService {
}
async searchStatistics(auth: AuthDto, dto: StatisticsSearchDto): Promise<SearchStatisticsResponseDto> {
const userIds = await this.getUserIdsToSearch(auth);
const userIds = await this.getUserIdsToSearch(auth, dto.visibility);
if (dto.visibility === AssetVisibility.Locked) {
requireElevatedPermission(auth);
}

16
server/test/medium/specs/services/search.service.spec.ts
View file

@ -89,6 +89,22 @@ describe(SearchService.name, () => {
expect(result).toEqual({ total: 0 });
});
it('should not return locked assets of partner in elevated session', async () => {
const { sut, ctx } = setup();
const { user } = await ctx.newUser();
const { user: partner } = await ctx.newUser();
await ctx.newPartner({ sharedById: partner.id, sharedWithId: user.id });
await ctx.newAsset({ ownerId: partner.id, visibility: AssetVisibility.Locked });
const auth = factory.auth({ user: { id: user.id }, session: { hasElevatedPermission: true } });
const result = await sut.searchStatistics(auth, { visibility: AssetVisibility.Locked });
expect(result).toEqual({ total: 0 });
});
});
describe('withStacked option', () => {