immich-app/immich

Manage location shows partner assets as if they were editable

Open

#21471 opened on Aug 31, 2025

View on GitHub
 (3 comments) (0 reactions) (0 assignees)TypeScript (100,600 stars) (5,601 forks)batch import
good first issue🖥️web

Description

I have searched the existing issues, both open and closed, to make sure this is not a duplicate report.

  • Yes

The bug

I have three accounts in my server I was testing the "manage location" utility The problem that I have is that it show all the assets, including the ones not belonging to my account. When I try to change the location of a picture from a different account it is doing nothing (as expected) But would be nice that utility only show assets from my account or a banner that explain that it will not modify other accounts

The OS that Immich Server is running on

Ubuntu 24.04

Version of Immich Server

1.140.1

Version of Immich Mobile App

1.140

Platform with the issue

  • Server
  • Web
  • Mobile

Device make and model

No response

Your docker-compose.yml content

Standard

Your .env content

Standard

Reproduction steps

...

Relevant log output

Additional information

No response

Contributor guide

Tech stack
typescriptrest apireact
Domain
backendfrontend
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Understanding of multi user photo managementBasic knowledge of REST APIs
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40
Research direction
The issue describes that the 'Manage location' view shows assets from all accounts, but only allows modification of own assets. The fix likely involves filtering assets by ownership in the backend endpoint that serves assets for the location management page. Investigate the location management controller and service in the Immich repo (e.g., in server/src/domains/location/). Check if there is a user ID parameter or authentication context that should be used to filter assets. Review existing permission checks for other similar features (e.g., album management) to ensure consistency.