Prevent orphaned user permissions and preferences (#17643)

Prevent orphaned user permissions and preferences

1 files changed, 2 insertions, 0 deletions

diff --git a/Jellyfin.Server.Implementations/Users/UserManager.cs b/Jellyfin.Server.Implementations/Users/UserManager.cs
index 81408d9aa8..932ced547a 100644
--- a/Jellyfin.Server.Implementations/Users/UserManager.cs
+++ b/Jellyfin.Server.Implementations/Users/UserManager.cs
@@ -225,12 +225,14 @@ namespace Jellyfin.Server.Implementations.Users
                         ?? throw new ResourceNotFoundException(nameof(user.Id));
 
                     dbContext.Entry(dbUser).CurrentValues.SetValues(user);
+                    dbContext.Permissions.RemoveRange(dbUser.Permissions);
                     dbUser.Permissions.Clear();
                     foreach (var permission in user.Permissions)
                     {
                         dbUser.Permissions.Add(new Permission(permission.Kind, permission.Value));
                     }
 
+                    dbContext.Preferences.RemoveRange(dbUser.Preferences);
                     dbUser.Preferences.Clear();
                     foreach (var preference in user.Preferences)
                     {