mirror of
https://github.com/jellyfin/jellyfin.git
synced 2026-05-04 18:09:12 +03:00
Search can return people that only appear in libraries the user has no access to #7864
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @JesHansen on GitHub (Dec 4, 2025).
Description of the bug
Suppose I have two movie libraries, A (non-child friendly) and B (child friendly), and have users set up so that they may either access both categories (adults) or just one of them (children).
Then I would expect that if I were logged in with an account that only have access to the child friendly library that their search results were restricted to only movies and actors appearing in the child friendly category.
Example:
If I put Antichrist starring Willem Dafoe into my A library, and this is the only movie in my libraries he is in, then a child account should not be shown him as a search result. Only when he also appears in a film in the child friendly library (for example by adding Finding Nemo to library B) should he be shown in the search results when a child account uses the search function.
Today's behavior: When a child searches for 'Will', Willem Dafoe will be shown, but the movie list he appears in is empty.
Expected behavior: When Willem Dafoe is not in any movies in the child library, he is not listed when a child user account searches.
Reproduction steps
What is the current bug behavior?
The restricted user who can only access movies in one of the two libraries is still able to search for actors (directors, etc.) associated only with movies from the library that they do not have access to.
What is the expected correct behavior?
The restricted user is only shown search results for people associated with movies from libraries they have access to. Actors, director, producers etc. that are only associated with movies they do not have access to are not shown as search results.
Jellyfin Server version
Older*
Specify commit id
No response
Specify unstable release number
No response
Specify version number
10.10.7
Specify the build version
10.10.7
Environment
Jellyfin logs
FFmpeg logs
Client / Browser logs
No response
Relevant screenshots or videos
No response
Additional information
No response
@wkearney99 commented on GitHub (Dec 5, 2025):
It does not appear that JF has the ability to limit actor searches to only currently accessible libraries. I noticed this several years ago.
I noticed it more in the context of mature rated media and headshots that tend to likewise be of a mature nature. I don't think actor headshots have rating support, so it'd have to extend from the movies.
@theguymadmax commented on GitHub (Dec 12, 2025):
Dupe of: #2207