Skip to content

Fix: face detections user scope - #1590

Merged
marcelklehr merged 2 commits into
mainfrom
fix/face-detections-user-scope
Oct 28, 2026
Merged

marcelklehr merged 2 commits into
mainfrom
fix/face-detections-user-scope

Conversation

@marcelklehr

Copy link
Copy Markdown
Member

🤖 AI (if applicable)

  • The content of this PR was partly or fully generated using AI (N/A)

The face-detections property returned the detections of all users with
access to a file, including their private cluster titles.

Assisted-by: ClaudeCode:claude-opus-5.5
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
Face photos were resolved by detection id without checking that the
detection belongs to the requesting user, which allowed moving other
users' detections into one's own clusters.

Assisted-by: ClaudeCode:claude-opus-5.5
Signed-off-by: Marcel Klehr <mklehr@gmx.net>
@marcelklehr
marcelklehr merged commit 2d044e8 into main Oct 28, 2026
42 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant