immich-app/immich
1
0
Fork 0
mirror of https://github.com/immich-app/immich.git synced 2026-07-25 14:00:45 +03:00
Code Issues 783 Packages Projects Releases 22 Wiki Activity

Mobile App not honoring "Public Users" setting #8255

New Issue
Closed
opened 2026-02-05 13:37:28 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-05 13:37:28 +03:00
Owner
Copy Link

Originally created by @GomoDD on GitHub (Jan 14, 2026).

I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.

  • Yes

The bug

When sharing an album as a non-admin user the server is exposing list of all existing users on the server even when the "Public Users" setting is disabled.

The OS that Immich Server is running on

Ubuntu 22.04 LTS

Version of Immich Server

v2.4.1

Version of Immich Mobile App

v2.4.1 build.3030

Platform with the issue

  • Server
  • Web
  • Mobile

Device make and model

Hauwei P30 Pro, .. all android

Your docker-compose.yml content

n/a

Your .env content

n/a

Reproduction steps

  1. Ensure "Public Users" setting under "Server Settings" is disabled
    Image

  2. Using mobile Immich App create a new album while logged in as a non-admin user

  3. Share the album with an existing / known user

  4. Observe album share exposing entire list of users on the Immich server

Relevant log output

Additional information

No response

Originally created by @GomoDD on GitHub (Jan 14, 2026). ### I have searched the existing issues, both open and closed, to make sure this is not a duplicate report. - [x] Yes ### The bug When sharing an album as a non-admin user the server is exposing list of all existing users on the server even when the "Public Users" setting is disabled. ### The OS that Immich Server is running on Ubuntu 22.04 LTS ### Version of Immich Server v2.4.1 ### Version of Immich Mobile App v2.4.1 build.3030 ### Platform with the issue - [ ] Server - [ ] Web - [x] Mobile ### Device make and model Hauwei P30 Pro, .. all android ### Your docker-compose.yml content ```YAML n/a ``` ### Your .env content ```Shell n/a ``` ### Reproduction steps 1. Ensure "Public Users" setting under "Server Settings" is disabled <img width="930" height="482" alt="Image" src="https://github.com/user-attachments/assets/efc6c1fb-33f9-4302-b61f-841d4b6fb67c" /> 2. Using mobile Immich App create a new album while logged in as a non-admin user 3. Share the album with an existing / known user 4. Observe album share exposing entire list of users on the Immich server ### Relevant log output ```shell ``` ### Additional information _No response_
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
accessibility
changelog:enhancement
changelog:security
changelog:skip
changelog:translation
cli
date-time
dependencies
documentation
external-library
format
good first issue
mobile-beta
mobile-beta
mobile-beta
needs-answer
nice to have
pull-request
Mirrored from GitHub Pull Request
 sharing
tech-debt
📱mobile
🖥️web
🗄️server
🧠machine-learning
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: immich-app/immich#8255
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?