Claudio e4127f1e04 fix(library): scope source_dirs to current user in /stats ...

Without this, a non-admin hitting /api/v1/library/stats would see
every other user's active SourceRoot path in the response (e.g.
muli would see /nextcloud-users/admin/files/Photos). Cross-user
visibility into Nextcloud paths is a small info leak in a multi-user
setup. Admins still get the global list when they pass scope=global.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-26 09:46:54 +02:00

..

alembic

feat(nextcloud): per-user Nextcloud library integration

2026-04-26 01:06:37 +02:00

app

fix(library): scope source_dirs to current user in /stats

2026-04-26 09:46:54 +02:00

alembic.ini

feat: migrate to Postgres + pgvector with Alembic scaffolding

2026-04-10 08:46:20 +02:00

bootstrap.py

feat: multi-user auth with per-user media isolation

2026-04-12 21:47:43 +02:00

Dockerfile

fix: use CPU-only PyTorch and run init_db before alembic migrations

2026-04-10 18:23:32 +02:00

requirements.txt

feat(auth): Authentik OIDC sign-in + Gravatar avatars

2026-04-22 21:06:32 +02:00