Permissions on labels

Support
1

Hi guys,

after the deployment of v2.3.0 I have the issues that labels seem to have an owner. I can no longer add any label to my tasks, onle the labels that I created myself. Is that the expected behaviour?

In our team we label tasks with shared labels like ‘operations’, ‘documentation’ and so on.

1 Like
2

I also have the same issue, seems like a critical bug @kolaente

3

Same issue here, I’m using Vikunja v2.3.0, self-hosted in using Docker (version 29.6.1). I attach a piece of the log:

time=2026-07-14T14:09:12.134Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/53/labels status=403 latency=640.671µs err=“code=403, message=Forbidden”`
time=2026-07-14T14:10:49.055Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/53/labels status=403 latency=626.441µs err=“code=403, message=Forbidden”
time=2026-07-14T14:12:12.394Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/54/labels status=403 latency=640.481µs err=“code=403, message=Forbidden”
time=2026-07-14T14:12:24.649Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/54/labels status=403 latency=605.503µs err=“code=403, message=Forbidden”
time=2026-07-14T14:12:42.142Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/54/labels status=403 latency=599.684µs err=“code=403, message=Forbidden”
time=2026-07-14T14:13:04.735Z level=ERROR component=http remote_ip=<my-ip-address> method=PUT uri=/api/v1/tasks/54/labels status=403 latency=639.659µs err=“code=403, message=Forbidden”

Is already available a patch version? @kolaente