From 378cdb7f102f63128dd236c13f1a3745902d5a2c Mon Sep 17 00:00:00 2001
From: Eli Bosley <ekbosley@gmail.com>
Date: Tue, 23 Sep 2025 15:46:22 -0400
Subject: [PATCH] fix: issue with incorrect permissions on viewer / other roles

---
 api/src/unraid-api/auth/auth.module.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/api/src/unraid-api/auth/auth.module.ts b/api/src/unraid-api/auth/auth.module.ts
index f023a3a70..27eca6dc1 100644
--- a/api/src/unraid-api/auth/auth.module.ts
+++ b/api/src/unraid-api/auth/auth.module.ts
@@ -28,6 +28,7 @@ import { getRequest } from '@app/utils.js';
         CasbinModule,
         AuthZModule.register({
             imports: [CasbinModule],
+            enablePossession: false,
             enforcerProvider: {
                 provide: AUTHZ_ENFORCER,
                 useFactory: async (casbinService: CasbinService) => {