github-starred/actual
2
0
Fork 0
mirror of https://github.com/actualbudget/actual.git synced 2026-05-06 07:01:45 -05:00
Code Issues 1.5k Packages Projects Releases 54 Wiki Activity

[Bug]: Non owner users able to delete shared budgets. And owners unable to register the budget on the sync error produced. #2701

New Issue
Closed
opened 2026-02-28 20:25:00 -06:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-02-28 20:25:00 -06:00
Owner
Copy Link

Originally created by @Sridhar701Pitt on GitHub (Dec 8, 2025).

Originally assigned to: @Copilot on GitHub.

Verified issue does not already exist?

  • I have searched and found no existing issue

What happened?

A bug happened!

Only Budget owner or server owner must have permission to delete a budget. All other shared budget users should not have delete access to the budget they don't own.

Image

How can we reproduce the issue?

How can we reproduce the issue?
Enabled multiuser support with OpenID with google.com

Server or Budget Owner creates a budget and shares it with another user.
The user deletes the budget from the switch files menu and thereby removing it from the server.
Now, for Server/budget owner, it shows a local only file.
Server/budget owner gets a sync error in their budget file and cannot recover the budget by trying to register (clicking the register button) from the UI.
Message:
"This file is not a cloud file
You need to register it to take advantage of syncing which allows you to use it across devices and never worry about losing your data. "

Where are you hosting Actual?

Pikapods

What browsers are you seeing the problem on?

Firefox, Chrome, Safari

Operating System

Windows 11

Originally created by @Sridhar701Pitt on GitHub (Dec 8, 2025). Originally assigned to: @Copilot on GitHub. ### Verified issue does not already exist? - [x] I have searched and found no existing issue ### What happened? A bug happened! Only Budget owner or server owner must have permission to delete a budget. All other shared budget users should not have delete access to the budget they don't own. <img width="1920" height="914" alt="Image" src="https://github.com/user-attachments/assets/e810ad93-5366-4b2e-b149-8cd264c2c2f8" /> ### How can we reproduce the issue? How can we reproduce the issue? Enabled multiuser support with OpenID with google.com Server or Budget Owner creates a budget and shares it with another user. The user deletes the budget from the switch files menu and thereby removing it from the server. Now, for Server/budget owner, it shows a local only file. Server/budget owner gets a sync error in their budget file and cannot recover the budget by trying to register (clicking the register button) from the UI. Message: "This file is not a cloud file You need to register it to take advantage of syncing which allows you to use it across devices and never worry about losing your data. <Register button>" ### Where are you hosting Actual? Pikapods ### What browsers are you seeing the problem on? Firefox, Chrome, Safari ### Operating System Windows 11
GiteaMirror added the bugserver labels 2026-02-28 20:25:00 -06:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
AI generated
API
bank sync
budgeting
bug
can’t replicate
dependencies
docker
documentation
electron
experimental feature
feature
feedback
goal templates
good first issue
help wanted
importers
maintenance
needs info
needs testing
needs triage
needs votes
openid
payees
pull-request
Mirrored from GitHub Pull Request
 regression
reports
responsive
rules
schedules
server
✨ merged
split transactions
tech debt
theme
transaction import
transaction reconciliation
transactions
translations
upstream
user interface
✅ approved
wontfix
No Label bug server
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#2701
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?