mealie-recipes / mealie

Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the url and mealie will automatically import the relevant data or add a family recipe with the UI editor
https://docs.mealie.io
GNU Affero General Public License v3.0
6.75k stars 693 forks source link

[BUG] - Users can see/manage foods/units/labels from other groups #3727

Closed michael-genson closed 1 month ago

michael-genson commented 3 months ago

First Check

What is the issue you are experiencing?

When managing foods/units/labels, users see all of them, regardless of group. This allows users to, for instance, assign labels from one group to a food from another group, etc. This causes a bunch of issues.

We need to check all places we're accessing foods/units/labels and make sure they're locked down by group

Steps to Reproduce

1) Create labels in one group 2) Head to another group's manage data page and observe the labels

Please provide relevant logs

N/A

Mealie Version

nightly (4634ad56667ee34c8b7900de3b275f1727330397)

Deployment

Docker (Synology)

Additional Deployment Details

No response