Disable Delete Option #2130

New Issue

giteasync · 2025-10-01T16:12:18-05:00

giteasync commented

2025-10-01 16:12:18 -05:00

Originally created by @passionate2023 on GitHub.

Describe feature

#1. Assume i have hosted trilium in a server. Does any user who goes through the notebook will be able to delete the content?
#2. Can we have read only users who can only read which has been published in the server by the admin
#3. Best vps or recommended vps for hosting

Additional Information

No response

Originally created by @passionate2023 on GitHub. ### Describe feature #1. Assume i have hosted trilium in a server. Does any user who goes through the notebook will be able to delete the content? #2. Can we have read only users who can only read which has been published in the server by the admin #3. Best vps or recommended vps for hosting ### Additional Information _No response_

giteasync closed this issue

2025-10-01 16:12:19 -05:00

giteasync commented

2025-10-01 16:12:20 -05:00

@passionate2023 commented on GitHub:

also what is the minium RAM required for linux vps hosting?

@passionate2023 commented on GitHub: also what is the minium RAM required for linux vps hosting?

giteasync commented

2025-10-01 16:12:20 -05:00

@sigaloid commented on GitHub:

Basically they should be able to search, view/read the content but not modify neither delete it

This is how sharing works, correct - no one but the main user can edit, everyone else sees a static HTML page.

also what is the minium RAM required for linux vps hosting?

According to my customer's stats, on average 120-150MB for a medium-sized database - that's just for the container. Add the host OS + reverse proxy and it probably needs double that. So somewhere in the ballpark of 256-512MB.

@sigaloid commented on GitHub: > Basically they should be able to search, view/read the content but not modify neither delete it This is how sharing works, correct - no one but the main user can edit, everyone else sees a static HTML page. > also what is the minium RAM required for linux vps hosting? According to my customer's stats, on average 120-150MB for a medium-sized database - that's just for the container. Add the host OS + reverse proxy and it probably needs double that. So somewhere in the ballpark of 256-512MB.

giteasync commented

2025-10-01 16:12:20 -05:00

@passionate2023 commented on GitHub:

Thanks a for the further details.

Is it possible to have searching of "All Notes" for the shared user. I want to share the entire notebook or all the notes and he has to search all the notes and not individual note search. Is searching is available to search for all the notes for the shared user instead of search in every single page for the shared user.

I'm looking for search similar to the main user for the entire notebook

@passionate2023 commented on GitHub: Thanks a for the further details. Is it possible to have searching of "All Notes" for the shared user. I want to share the entire notebook or all the notes and he has to search all the notes and not individual note search. Is searching is available to search for all the notes for the shared user instead of search in every single page for the shared user. I'm looking for search similar to the main user for the entire notebook

giteasync commented

2025-10-01 16:12:20 -05:00

@passionate2023 commented on GitHub:

Can i share the whole entire notebooks where the user can't delete it?

How to stop the user to make any changes or delete any content?

Basically they should be able to search, view/read the content but not modify neither delete it

@passionate2023 commented on GitHub: Can i share the whole entire notebooks where the user can't delete it? How to stop the user to make any changes or delete any content? Basically they should be able to search, view/read the content but not modify neither delete it

giteasync commented

2025-10-01 16:12:20 -05:00

@zadam commented on GitHub:

Hi, Trilium is a single user application. A logged-in user can do anything.

What you describe sounds similar to Sharing. The "published" pages are then publicly available as a web page and the readers can't delete or otherwise alter the published notes.

@zadam commented on GitHub: Hi, Trilium is a single user application. A logged-in user can do anything. What you describe sounds similar to [Sharing](https://github.com/zadam/trilium/wiki/Sharing). The "published" pages are then publicly available as a web page and the readers can't delete or otherwise alter the published notes.

giteasync commented

2025-10-01 16:12:21 -05:00

@passionate2023 commented on GitHub:

Is disabling the delete option is available in any of the latest release?

@passionate2023 commented on GitHub: Is disabling the delete option is available in any of the latest release?

giteasync commented

2025-10-01 16:12:21 -05:00

@sottey commented on GitHub:

Also, regarding the hosting, I am using a DigitalOcean droplet which has 2gig of RAM and 60 gig of space and it is more than enough. Using the docker image in a droplet was a bit tough for me at first, but once I figured it out, it's been great!

@sottey commented on GitHub: Also, regarding the hosting, I am using a DigitalOcean droplet which has 2gig of RAM and 60 gig of space and it is more than enough. Using the docker image in a droplet was a bit tough for me at first, but once I figured it out, it's been great!

giteasync commented

2025-10-01 16:12:21 -05:00

@sigaloid commented on GitHub:

No - but this is a valid feature request and you should definitely consider filing a feature request.

@sigaloid commented on GitHub: No - but this is a valid feature request and you should definitely consider [filing a feature request](https://github.com/zadam/trilium/issues/new?assignees=&labels=Type%3A+Enhancement&template=feature_request.yml&title=%28Feature+request%29+Search+all+shared+notes).

giteasync commented

2025-10-01 16:12:21 -05:00

@passionate2023 commented on GitHub:

Is disabling the delete option is available in any of the latest release?

@passionate2023 commented on GitHub: Is disabling the delete option is available in any of the latest release?

giteasync commented

2025-10-01 16:12:21 -05:00

@sottey commented on GitHub:

There is no event handler for before an event is deleted, there is only one for after: "onEventRemoved.

One approach would be to figure out the class names of the Remove toolbar icons and the remove button in the dialog box and set those to display = "none";

So the short answer is "no, not without coding a bit"

@sottey commented on GitHub: There is no event handler for before an event is deleted, there is only one for after: "onEventRemoved. One approach would be to figure out the class names of the Remove toolbar icons and the remove button in the dialog box and set those to display = "none"; So the short answer is "no, not without coding a bit"

giteasync commented

2025-10-01 16:12:21 -05:00

@zadam commented on GitHub:

One approach would be to figure out the class names of the Remove toolbar icons and the remove button in the dialog box and set those to display = "none";

This might hide the actions in the UI, but all the requests would still be open to a malicious user.

I'm going to close this issue since I don't really plan to go into this direction. For public sharing, there's the "share" functionality, but it has functional limitations. I don't plan to make a read-only version of the full app, mainly because of security considerations (large attack surface).

@zadam commented on GitHub: > One approach would be to figure out the class names of the Remove toolbar icons and the remove button in the dialog box and set those to display = "none"; This might hide the actions in the UI, but all the requests would still be open to a malicious user. I'm going to close this issue since I don't really plan to go into this direction. For public sharing, there's the "share" functionality, but it has functional limitations. I don't plan to make a read-only version of the full app, mainly because of security considerations (large attack surface).

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: TriliumNext/Trilium#2130