[Feature] Allow locking certain Shared Albums so that assets cannot be deleted in them by any (non-admin) members

[jon-f-novastor]

The feature

Allow locking certain Shared Albums so that assets cannot be deleted in them by any (non-admin) members. Currently, any member of a Shared Album can delete assets from it even if they aren't the album owner, the asset owner, or the admin user (confirmed using 1.58.0 Android mobile), which is dangerous if a kid is browsing photos that doesn't understand that deleting assets in them is permanent in Immich. There are cases where you don't want any assets to be deletable in a Shared Album, and you will no longer need to have additional assets added to it either, like a family trip whereby everyone is done adding assets to it, and the ability to at least not allow deleting any assets in certain marked Shared Album would be useful in case of accidental deletions of precious assets, that may only be stored in Immich and have been deleted from all other devices. If your child is using you or your partner's phone just browsing your family images or otherwise shared album member accidently deletes some precious assets simply due to negligence, or not understanding there is no recycle bin and the delete actions are permanent, there is no way to protect against that since all members of a shared album have the ability to delete (and add) assets. The feature could be something that the album owner can set or the admin user, and in that case it would be a per shared album capability, to make it an archived shared album, or just have a single setting that doesn't allow assets to be deleted by anyone (even by the owner or admin users), to lock it out from anyone being able to delete any asset in it (without the admin and / or album owner unlocking the setting first to allow that). The Shared Albums that are set this way, as an "Shared Album (Archived)" or a "Archived Shared Album" would contain a "lock" style icon next to the name visible in the albums listing, and visible when inside the album at the top, to make it easy for all members to identify if that property is enabled.

There also could be a setting per shared album that locks particular shared album members from deleting any assets. Additionally, outside of just having a single setting that locks the Shared Album from being able to delete or add to it, call it an "Archived Shared Album", basically that you don't want any assets to be able to be deleted from, there could be a read/write/delete checkbox per shared album member property that the admin can define after any Shared Album is already created, definable per Shared Album, that the admin can change at any time by editing that per album setting, to take care of these type of individual per user credentials in each album. Obviously the easiest to implement method would be a per Shared Album setting, inside each Shared Album, definable by the admin user (and/or the album owner) that locks the entire Shared Album from assets being able to be deleted from it by any current and future member of it. Once the Shared Album is locked this way, then nobody could delete assets from it (perhaps bar the admin user) unless it were unlocked first. To test how it currently works in 1.58.0 mobile, create a shared album and add one test user member (who is not the admin or the album owner) to it, then login to the mobile app with that same test user and view that same shared album, then view any photo (that the user logged in did not add), and the delete icon will appear on the bottom right, click it and it will prompt do you want to delete, then delete the asset, now that delete is permanent and if Immich was the only place where that asset was stored then nobody even the owner and admin will be able to restore that deleted image (as there is no Recycle Bin feature like Google Photos does have for one thing). This feature should be implemented in both web and mobile.

Platform

• Server
• Web
• Mobile