[Bug] Sonically similar recommendations ignore sharing rules

(Tagging this as Plexamp since that is the player demonstrating this, but it is a back-end issue that I have also seen affect other clients)

When a user who has certain music albums shared with them opens the “Sonically Similar Albums” view via Plexamp (or views them below an album in Plex web) they will be presented with a mix of albums that are shared with them and those which are not. These other albums (as expected) won’t appear in the library nor in searches, but it seems they slip through the sharing access controls via the Sonically Similar results.

In this case the first and the third albums are being shared with the client user. the second one is not:

When selecting the unshared album it fails to load:

(It throws a 404 “Something went wrong - An unexpected error occurred” when doing the same via the web client)

The server should be either a) not looking at media that is unshared when generating the list, or at the very least b) doing a filter on the results prior to returning them, to not serve media that the client user doesn’t have permission to access.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.