Users, Permissions, and Profiles

Fireshare is now multi-user. Accounts, permissions, media ownership, and shareable profile pages all land in this release — along with the removal of LDAP, which needs a deliberate step from anyone still using it.

⚠️ Breaking: LDAP has been removed

LDAP authentication is gone and every account is now a local account. Because converting directory accounts is a one-way change to your database, Fireshare refuses to start while any LDAP_* variable is still set, and it checks this before touching the database:

LDAP has been discontinued
---------------------------------------------------------------------
LDAP authentication has been removed from Fireshare in this version
and all later versions. This instance still has an LDAP
configuration, so Fireshare has not started and your database has
not been modified.

Removing those variables from your compose file is how you confirm the upgrade. On the next start, each directory account is converted to a local account:

• Uploads, profile, display name and permissions are kept. Nothing is deleted, and every account keeps its database id, so media stays attributed to whoever uploaded it.
• The account has no password, so it cannot sign in yet. Set one, or send an invite, from Settings → Users.
• Administrator status is left exactly as it was at that account's last sign-in. It used to be re-derived from LDAP_ADMIN_GROUP on every login; now it's an ordinary flag you manage yourself. Worth reviewing once after upgrading, since it's no longer maintained for you.

If you still depend on a directory server, do not remove the variables. Pin your image to 1.7.9 and stay there.

Users, Permissions, and Profiles

See Users.md for the full guide.

• Admin-managed accounts with individual permissions, plus Viewer / Contributor / Curator presets. Administrators can still do everything.
• view_private governs discovery — feeds, folders, tags, games, and profiles. Direct access by id is deliberately unchanged: private media stays link-only.
• Media ownership. Videos and images record who uploaded them, threaded through the upload endpoints and the background scan. Deleting a user never deletes their media; the uploader link is just cleared.
• Bulk "Set uploader" in File Manager for adopting existing content. On upgrade, your existing library is attributed to the administrator account.
• Profile pages with header art, banner uploads, a games tab, and a link through from Settings → Users.
• ⚠️ fireshare add-user now creates non-admin accounts by default. Before permissions existed it created administrators, because the underlying admin flag defaulted to true. Pass --admin for the old behaviour.
• ADMIN_USERNAME / ADMIN_PASSWORD are re-applied on every start and manage exactly one account — the administrator created on first run. Accounts created through Settings or the CLI are never touched by them.

P.S I have absolutely no intention of ever adding a commenting system to Fireshare. If you want to comment on videos, go to YouTube. Please do not request the ability to add interactions, comments, or any social systems on videos, they will be closed and ignored.

Content Visibility

• Private/public filter on the videos view and the image feed for authenticated users. Thanks @J-Stuff (#719)

Mobile Layout

• The top bar no longer runs off the edge of a phone. On the Videos and Images pages it packed the drawer toggle, three filter selects and the edit/search buttons into one row — around 500px of content. Those selects now collapse into a single button that opens them in a popover, with a dot when a filter is off its default so nothing is hidden silently.
• Form dialogs go fullscreen on mobile. Edit profile, Add user, and both upload dialogs take over the screen below the small breakpoint instead of sitting cramped in a centred box. The upload dialogs also stack their two columns, so the fields get full width instead of half.

UI/UX

• Sidebar navigation is grouped, with tighter item sizing.
• Sort and visibility filter selects are narrower.
• Switch labels are spaced away from their toggle.
• The empty top bar no longer renders on profile pages.
• The image viewer opens correctly from a profile page.

Security

• Action buttons are gated by the permission each endpoint actually requires, so the UI stops offering things the server will refuse.

Other

• NVIDIA_DRIVER_CAPABILITIES is baked into the image (compute,utility,video), so NVENC works without setting it yourself.

Upgrading

Three database migrations run automatically on first start. Back up your database first, as always.

1. If you use LDAP, read the breaking-change section above before pulling this image.
2. After upgrading, review administrator flags on any converted directory accounts.
3. Set passwords or send invites for converted accounts from Settings → Users.