[Feature] More granularity for API access

[RodoMa92]

I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.

• Yes

The feature

While configuring homepage (for stats management) and dawarich (for importing coordinates from my photos) I often encounter an error message from the API calls that just print out "Missing required permission: all".

This kinda defeat the point of a granular API permission system if I'm forced to allow all of them even if I'm just interested in one specific API call (I'm not really that happy to open up total app control just for monitoring the amount of storage taken from Immich, f.e.).

A possible workaround might be to just use a proxy kinda like CetusGuard that does the same for Docker; this would allow to regex the calls out in real time while leaving full access to the other container, but I would still prefer to have more direct control from Immich itself.

Thanks a lot for your software,

Marco

Platform

• Server
• Web
• Mobile

[GreaseHeadD]

They're working on it, see #20250