Bug Report – Embedded Playlist Cannot Be Shared in Xibo 4.3.1 (Missing ACL Controls)
Title: Embedded Playlist inside Layout cannot be shared with other users – no advanced ACL options shown in Layout Sharing (Xibo CMS 4.3.1)
Environment
-
Xibo CMS: 4.3.1
-
Installation: Docker
-
User: Admin
-
Feature affected: Playlist embedded inside Layout Regions
-
Permissions model: Standard ACL
Issue Summary
When creating a playlist directly inside a Layout Region (using the “Edit Playlist” button in the Layout Designer), the resulting playlist:
-
Does not appear under Library → Playlists
-
Cannot be shared with another user even if the user is given
-
View
-
Edit
-
Delete
on the layout itself
-
-
The Layout Sharing dialog DOES NOT show “Advanced” options, such as:
-
View sub-objects
-
Edit sub-objects
-
Inherit permissions to widgets/regions
These options existed in previous versions and are still referenced in documentation.
-
Because of this, another user (even with full permissions on the layout) cannot see or edit the playlist embedded inside the Layout, making collaboration impossible.
Steps to Reproduce
-
Log in as admin.
-
Create a new Layout.
-
Add a Region → click Edit Playlist.
-
Add images/PDFs directly inside this embedded playlist.
-
Create a new User.
-
Go to Layouts → Share and assign: View + Edit.
-
Log in as the new user → open the layout.
Result:
-
The user sees the layout, but the embedded playlist does not appear.
-
The user cannot edit the playlist.
-
No additional ACL or “Advanced” sharing options are available to propagate permissions to region objects or embedded playlists.
Expected Behavior
-
Embedded playlists should inherit layout permissions automatically,
OR -
The Layout Sharing dialog should include the missing “Advanced” ACL options to explicitly allow access to embedded objects:
-
View/Modify Widgets
-
View/Modify Regions
-
Inherit permissions to child objects
-
-
Documentation and UI should match the actual capabilities.
Actual Behavior
-
Embedded playlist remains invisible and inaccessible to any user except the creator.
-
Permissions on the parent layout do not propagate.
-
No advanced options appear in the Sharing dialog.
-
The only way to share a playlist is to recreate it as a standalone Playlist, which is not documented as mandatory.
Impact
This prevents:
-
Multi-user collaboration
-
Delegating layout editing
-
Editing internal playlist elements by non-admin users
-
Using embedded playlists safely in production environments
Workaround
Recreate the playlist as a standalone Playlist (Library → Playlist) and insert it into the layout as a Sub-Playlist widget.
However, this defeats the purpose of embedded playlists and contradicts earlier Xibo functionality.
Request
-
Clarification whether this is intended design or a regression.
-
Reinstatement of missing ACL inheritance controls.
-
Fix so embedded playlists can be shared, viewed, and edited by permitted users.
Thanks!