feat(plugins): allow mounting library directories as read-write (#5122)

* feat(plugins): mount library directories as read-only by default

Add an AllowWriteAccess boolean to the plugin model, defaulting to
false. When off, library directories are mounted with the extism "ro:"
prefix (read-only). Admins can explicitly grant write access via a new
toggle in the Library Permission card.

* test: add tests to buildAllowedPaths

Signed-off-by: Deluan <deluan@navidrome.org>

* chore: improve allowed paths logging for library access

Signed-off-by: Deluan <deluan@navidrome.org>

---------

Signed-off-by: Deluan <deluan@navidrome.org>

This commit is contained in:

Deluan Quintão

2026-02-28 10:59:13 -05:00

committed by

GitHub

parent d134de1061

commit d9a215e1e3

13 changed files with 229 additions and 75 deletions

									
										db/migrations/20260228020813_add_plugin_allow_write_access.sql
									
		+5
		
												View File
												
				@@ -0,0 +1,5 @@

				-- +goose Up

				ALTER TABLE plugin ADD COLUMN allow_write_access BOOL NOT NULL DEFAULT false;

				-- +goose Down

				ALTER TABLE plugin DROP COLUMN allow_write_access;