Violation of privacy when uploading to a private library
Steps to reproduce
-
A normal user creates a public library and uploads some content with metadata for an album e.g. "omega tau podcast deutsch", the album gonna automatically created by funkwhale.
-
The admin user creates a private test library
- The admin uploads an audio track to his private library with the same metadata for the album as the normal user.
What happens?
This uploaded track is gonna automatically associated with the public album/library of the normal user. It is listed in his album, but is marked as "N/A" and it is not playable. It remains in his album even if the admin deletes the file in his library.
What is expected?
A private library should not share any data with other libraries/accounts.
Context
Funkwhale version(s) affected: 0.20.1