Immich-Android-TV icon indicating copy to clipboard operation
Immich-Android-TV copied to clipboard

[FR] Add required API key permissions to README

Open lenisko opened this issue 6 months ago • 6 comments

Since version 1.135.0:

  • Granular API key access control creation.

It would be great to list all required permissions in README as it will increase security.

lenisko avatar Jun 19 '25 14:06 lenisko

Is there any other place, where I can see which permissions are required to use the app?

Xexanos avatar Sep 06 '25 11:09 Xexanos

I am seeing an error that I need to add "all" permission to the api key when I click folders? That's not happening! Anyone fancy sharing their current list of permissions that work? I have just ticked everything that is "read"?

ITSecUK avatar Sep 18 '25 16:09 ITSecUK

That should be: ["album.read", "activity.read", "asset.read", "asset.view", "asset.download", "album.read", "album.download", "archive.read", "face.read", "library.read", "timeline.read", "memory.read", "partner.read", "person.read", "session.read", "tag.read", "tag.asset"]

Because of a bug in the Immich server, version 136/137, "all" permissions were required.

giejay avatar Sep 18 '25 17:09 giejay

Hero! Yes I am on 137... ill update! Thanks for this @giejay this app screensaver is vital to me as it allows my photos / memories to play on the kitchen TV which is so much better than having them hidden in a server!

ITSecUK avatar Sep 18 '25 17:09 ITSecUK

Just to confirm on server 142 I still have this issue when I select Folders I get the error that I need all permissions after verifying I have all the permissions you specified. I suspect it might be an Immich issue as I can't see any other relevant permissions to enable. Its also possibly something to-do with the fact that I use external libraries. Its not a big deal for me because as I said I really just use it for screensaver, but thought I would let you know in case its something obvious!

Thanks again.

ITSecUK avatar Sep 20 '25 09:09 ITSecUK

Yeah I noticed that as well, I'm gonna guess the API call view/folder/unique-paths does not have a specific role attached, that's why you need all.

giejay avatar Oct 11 '25 17:10 giejay