Deluan Quintão d9a215e1e3 feat(plugins): allow mounting library directories as read-write (#5122) ...

* feat(plugins): mount library directories as read-only by default

Add an AllowWriteAccess boolean to the plugin model, defaulting to
false. When off, library directories are mounted with the extism "ro:"
prefix (read-only). Admins can explicitly grant write access via a new
toggle in the Library Permission card.

* test: add tests to buildAllowedPaths

Signed-off-by: Deluan <deluan@navidrome.org>

* chore: improve allowed paths logging for library access

Signed-off-by: Deluan <deluan@navidrome.org>

---------

Signed-off-by: Deluan <deluan@navidrome.org>

2026-02-28 10:59:13 -05:00

..

criteria

feat: make album and artist annotations available to smart playlists (#4927)

2026-02-22 22:05:59 -05:00

id

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

metadata

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

request

fix(scanner) artist stats not refreshing during quick scan and after missing file deletion (#4269)

2025-06-26 15:50:56 -04:00

album_test.go

feat(subsonic): append album version to names in Subsonic API (#5111)

2026-02-26 10:50:12 -05:00

album.go

feat(subsonic): append album version to names in Subsonic API (#5111)

2026-02-26 10:50:12 -05:00

annotation.go

feat(subsonic): Add avgRating from subsonic spec (#4900)

2026-01-18 17:42:42 -05:00

artist_info.go

Get Similar Artists in parallel

2020-10-21 21:44:03 -04:00

artist.go

feat: Multi-library support (#4181)

2025-07-18 18:41:12 -04:00

artwork_id_test.go

Add lastUpdated to coverArt ids. Helps with invalidating art cache client-side.

2023-02-08 20:03:31 -05:00

artwork_id.go

Add lastUpdated to coverArt ids. Helps with invalidating art cache client-side.

2023-02-08 20:03:31 -05:00

bookmark.go

Use structs lib to map models to DB. Fix #1266

2021-08-01 12:04:45 -04:00

datastore.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

errors.go

feat: Multi-library support (#4181)

2025-07-18 18:41:12 -04:00

file_types_test.go

Refactor file type functions

2022-12-28 15:31:56 -05:00

file_types.go

Fix M3U mimetype on Debian Bullseye

2024-05-09 22:26:15 -04:00

folder_test.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

folder.go

feat(scanner): implement selective folder scanning and file system watcher improvements (#4674)

2025-11-14 22:15:43 -05:00

genre.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

get_entity.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

library.go

feat: Multi-library support (#4181)

2025-07-18 18:41:12 -04:00

lyrics_test.go

feat:(server): support reading lyrics from filesystem (#2897)

2025-04-30 08:10:19 -04:00

lyrics.go

feat:(server): support reading lyrics from filesystem (#2897)

2025-04-30 08:10:19 -04:00

mediafile_internal_test.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

mediafile_test.go

feat(subsonic): append album version to names in Subsonic API (#5111)

2026-02-26 10:50:12 -05:00

mediafile.go

feat(subsonic): append album version to names in Subsonic API (#5111)

2026-02-26 10:50:12 -05:00

model_suite_test.go

Rename log.LevelCritical to log.LevelFatal

2022-12-21 14:53:36 -05:00

participants_test.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

participants.go

feat(server): expose main credit stat to reflect only album artist | artist credit (#4268)

2025-06-28 19:00:13 -04:00

player.go

chore: remove more outdated TODOs

2025-03-23 11:53:43 -04:00

playlist_test.go

refactor: unify logic to export to M3U8

2025-05-27 12:37:57 -04:00

playlist.go

feat: Multi-library support (#4181)

2025-07-18 18:41:12 -04:00

playqueue.go

feat(server): add update and clear play queue endpoints to native API (#4215)

2025-06-11 12:02:31 -04:00

plugin.go

feat(plugins): allow mounting library directories as read-write (#5122)

2026-02-28 10:59:13 -05:00

properties.go

Associate main entities with library

2024-05-12 21:37:42 -04:00

radio.go

Replace beego/orm with dbx (#2693)

2023-12-09 13:52:17 -05:00

scanner_test.go

feat(scanner): implement selective folder scanning and file system watcher improvements (#4674)

2025-11-14 22:15:43 -05:00

scanner.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

scrobble_buffer.go

Fix scrobble error spam in the logs.

2024-04-26 16:59:14 -04:00

scrobble.go

feat(server): track scrobble/linstens history (#4770)

2025-12-06 11:07:18 -05:00

searchable.go

feat(subsonic): sort search3 results by relevance (#5086)

2026-02-23 08:51:54 -05:00

share.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

tag_mappings.go

fix(scanner): custom tags working again

2025-07-26 21:40:41 -04:00

tag_test.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

tag.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

transcoding.go

Replace beego/orm with dbx (#2693)

2023-12-09 13:52:17 -05:00

user_props.go

Pass userId explicitly to UserPropsRepository methods

2021-06-25 22:21:37 -04:00

user_test.go

feat: Multi-library support (#4181)

2025-07-18 18:41:12 -04:00

user.go

chore(deps): bump golangci-lint to v2.10.0 and suppress new gosec false positives

2026-02-17 09:28:42 -05:00