diff --git a/client/src/components/SelectionActionBar.vue b/client/src/components/SelectionActionBar.vue
index bbbda404b..d739a6bdf 100644
--- a/client/src/components/SelectionActionBar.vue
+++ b/client/src/components/SelectionActionBar.vue
@@ -64,14 +64,18 @@ const BTN_TEXT_DESTRUCTIVE =
   'h-8 px-3 rounded-full text-sm font-medium text-destructive hover:bg-destructive hover:text-destructive-foreground transition-colors'
 const DIVIDER = 'w-px h-5 bg-border mx-1 shrink-0'
 
-const props = defineProps<{
-  count: number
-  visible: boolean
-  inCollection?: boolean
-  inFlight?: InFlightOp | null
-  // Selection is query-scoped (all matching across pages), so individual ids aren't enumerable.
-  queryScoped?: boolean
-}>()
+const props = withDefaults(
+  defineProps<{
+    count: number
+    visible: boolean
+    inCollection?: boolean
+    inFlight?: InFlightOp | null
+    // Selection is query-scoped (all matching across pages), so individual ids aren't enumerable.
+    queryScoped?: boolean
+    metadataEditable?: boolean
+  }>(),
+  { metadataEditable: true },
+)
 
 const emit = defineEmits<{
   'add-to-collection': []
@@ -111,8 +115,9 @@ const slots = useSlots()
 const hasCustomContent = computed(() => Boolean(slots.content))
 const canBulkActions = computed(() => !isDemoRestrictedAccount.value)
 const canDownload = computed(() => hasPermission('library_download') && canBulkActions.value)
-const canEditMetadata = computed(() => hasPermission('library_edit_metadata') && canBulkActions.value)
-const canMoveToLibrary = computed(() => hasPermission('library_edit_metadata') && canBulkActions.value)
+const canSetRating = computed(() => hasPermission('library_edit_metadata') && canBulkActions.value)
+const canEditMetadata = computed(() => hasPermission('library_edit_metadata') && canBulkActions.value && props.metadataEditable !== false)
+const canMoveToLibrary = computed(() => hasPermission('library_edit_metadata') && canBulkActions.value && props.metadataEditable !== false)
 const canShowMoreMenu = computed(() => canDownload.value || canEditMetadata.value || canMoveToLibrary.value)
 const canShare = computed(() => hasPermission('email_send') || canDownload.value)
 const numericFieldSelected = computed(() => bulkField.value === 'publishedYear')
@@ -310,7 +315,7 @@ watch(
               <TooltipContent side="top">{{ t('components.selectionActionBar.setReadingStatus') }}</TooltipContent>
             </Tooltip>
 
-            <Tooltip v-if="canEditMetadata">
+            <Tooltip v-if="canSetRating">
               <TooltipTrigger as-child>
                 <button
                   data-testid="action-bulk-set-rating"
diff --git a/client/src/components/__tests__/SelectionActionBar.spec.ts b/client/src/components/__tests__/SelectionActionBar.spec.ts
index 195028951..54cb2267b 100644
--- a/client/src/components/__tests__/SelectionActionBar.spec.ts
+++ b/client/src/components/__tests__/SelectionActionBar.spec.ts
@@ -55,6 +55,14 @@ function mountBar() {
 }
 
 describe('SelectionActionBar demo restriction', () => {
+  it('hides metadata actions when the selection includes a read-only library', async () => {
+    const wrapper = mountBar()
+    await wrapper.setProps({ metadataEditable: false })
+    expect(wrapper.find('[data-testid="action-edit-individually"]').exists()).toBe(false)
+    expect(wrapper.find('[data-testid="action-bulk-set-field"]').exists()).toBe(false)
+    expect(wrapper.find('[data-testid="action-bulk-set-rating"]').exists()).toBe(true)
+  })
+
   beforeEach(() => {
     permissionState.allowed = new Set(['library_edit_metadata', 'library_download', 'email_send', 'library_delete_books'])
     permissionState.demoRestricted = false
diff --git a/client/src/features/author/views/AuthorDetailView.spec.ts b/client/src/features/author/views/AuthorDetailView.spec.ts
index 0a5a605cb..9c70e14e6 100644
--- a/client/src/features/author/views/AuthorDetailView.spec.ts
+++ b/client/src/features/author/views/AuthorDetailView.spec.ts
@@ -73,6 +73,10 @@ vi.mock('@/features/library/composables/useLibraries', () => ({
   useLibraries: () => ({ libraries: ref([]), fetchLibraries: mocks.fetchLibraries }),
 }))
 
+vi.mock('@/features/library/composables/useLibraryPermissions', () => ({
+  useLibraryPermissions: () => ({ hasLibraryPermission: () => true, hasPermissionInAnyLibrary: () => true }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
   usePermissions: () => ({ hasPermission: () => true, isSuperuser: ref(false) }),
 }))
diff --git a/client/src/features/author/views/AuthorDetailView.vue b/client/src/features/author/views/AuthorDetailView.vue
index c78cdfd05..f5989513c 100644
--- a/client/src/features/author/views/AuthorDetailView.vue
+++ b/client/src/features/author/views/AuthorDetailView.vue
@@ -15,6 +15,7 @@ import { useScrollRestoreOnActivate } from '@/features/book/composables/useScrol
 import { useSeriesCollapsePreference } from '@/features/book/composables/useSeriesCollapsePreference'
 import { useDisplaySettings } from '@/composables/useDisplaySettings'
 import { useLibraries } from '@/features/library/composables/useLibraries'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
 import { usePageTitle } from '@/composables/usePageTitle'
 import { useDeleteBook } from '@/features/book/composables/useDeleteBook'
@@ -43,11 +44,12 @@ const route = useRoute()
 const router = useRouter()
 const mainRef = ref<HTMLElement | null>(null)
 useScrollRestoreOnActivate(mainRef)
-const { hasPermission, isSuperuser } = usePermissions()
+const { isSuperuser } = usePermissions()
 const { width: windowWidth } = useWindowSize()
 
 const { portraitCoverSize, gridGap } = useDisplaySettings()
 const { libraries, fetchLibraries } = useLibraries()
+const { hasPermissionInAnyLibrary } = useLibraryPermissions()
 
 const authorBooksViewMode = ref<'grid' | 'list'>('grid')
 
@@ -95,7 +97,7 @@ const {
   loadFresh: loadFreshMetadataPreview,
 } = useAuthorMetadataPreview(authorName)
 
-const canUpdate = computed(() => hasPermission('library_edit_metadata'))
+const canUpdate = computed(() => hasPermissionInAnyLibrary('library_edit_metadata', 'editor'))
 const canMerge = computed(() => isSuperuser.value)
 const canDelete = computed(() => isSuperuser.value)
 
diff --git a/client/src/features/author/views/AuthorsView.spec.ts b/client/src/features/author/views/AuthorsView.spec.ts
index cb46d66f4..5d0e44a8a 100644
--- a/client/src/features/author/views/AuthorsView.spec.ts
+++ b/client/src/features/author/views/AuthorsView.spec.ts
@@ -73,6 +73,10 @@ vi.mock('@/features/library/composables/useLibraries', () => ({
   useLibraries: () => ({ libraries: ref([]), fetchLibraries: mocks.fetchLibraries }),
 }))
 
+vi.mock('@/features/library/composables/useLibraryPermissions', () => ({
+  useLibraryPermissions: () => ({ hasLibraryPermission: () => true, hasPermissionInAnyLibrary: () => true }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
   usePermissions: () => ({ hasPermission: () => true, isDemoRestrictedAccount: ref(false), isSuperuser: ref(false) }),
 }))
diff --git a/client/src/features/author/views/AuthorsView.vue b/client/src/features/author/views/AuthorsView.vue
index e35e2b334..a34e57b9e 100644
--- a/client/src/features/author/views/AuthorsView.vue
+++ b/client/src/features/author/views/AuthorsView.vue
@@ -14,6 +14,7 @@ import { useDisplaySettings } from '@/composables/useDisplaySettings'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
 import { useScrollRestoreOnActivate } from '@/features/book/composables/useScrollRestoreOnActivate'
 import { useLibraries } from '@/features/library/composables/useLibraries'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import JumpRail from '@/features/book/components/JumpRail.vue'
 import { bulkRefreshAuthorsMetadata, deleteAuthors, refreshAuthorMetadata } from '../api/author'
 import AuthorConfirmDialog from '../components/AuthorConfirmDialog.vue'
@@ -39,7 +40,8 @@ const mainRef = ref<HTMLElement | null>(null)
 useScrollRestoreOnActivate(mainRef)
 const { gridGap, viewMode, authorCoverSize, authorCoverShape, authorRowDensity, authorCoverFallback, showJumpRails } = useDisplaySettings()
 const { libraries, fetchLibraries } = useLibraries()
-const { hasPermission, isDemoRestrictedAccount, isSuperuser } = usePermissions()
+const { hasPermissionInAnyLibrary } = useLibraryPermissions()
+const { isDemoRestrictedAccount, isSuperuser } = usePermissions()
 const list = useAuthorsList()
 const { items, total, loading, error, hasMore, q, sort, order, libraryId, hasPhoto, hasSortName, addedWithinDays, minBookCount, load } = list
 const { markRefreshing, clearRefreshing, isRefreshing } = useRefreshingAuthors()
@@ -66,7 +68,7 @@ const bulkRefreshConfirmButton = ref<HTMLButtonElement | null>(null)
 const pendingDeleteIds = ref<number[]>([])
 const deleteDialogOpen = ref(false)
 
-const canRefreshMetadata = computed(() => hasPermission('library_edit_metadata') && !isDemoRestrictedAccount.value)
+const canRefreshMetadata = computed(() => hasPermissionInAnyLibrary('library_edit_metadata', 'editor') && !isDemoRestrictedAccount.value)
 const canDeleteAuthors = computed(() => isSuperuser.value)
 
 /** The page offers exactly the two views the design has; `table` is not one of them. */
diff --git a/client/src/features/book/components/BookCoverCard.test.ts b/client/src/features/book/components/BookCoverCard.test.ts
index df63f3caf..c0df09a05 100644
--- a/client/src/features/book/components/BookCoverCard.test.ts
+++ b/client/src/features/book/components/BookCoverCard.test.ts
@@ -40,7 +40,10 @@ vi.mock('@/features/book/lib/book-card-mapper', () => ({
 
 const mockHasPermission = vi.fn<() => boolean>().mockReturnValue(true)
 vi.mock('@/features/auth/composables/usePermissions', () => ({
-  usePermissions: () => ({ hasPermission: mockHasPermission }),
+  usePermissions: () => ({ hasPermission: mockHasPermission, isSuperuser: ref(false) }),
+}))
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 7, accessLevel: 'editor' }]) }),
 }))
 
 const mockFetchAuthors = vi.hoisted(() =>
@@ -139,6 +142,7 @@ function makeFile(overrides: Partial<{ id: number; format: string; role: string;
 function makeBook(overrides: Partial<BookCard> = {}): BookCard {
   return {
     id: 1,
+    libraryId: 7,
     status: 'present',
     coverAspectRatio: '2/3',
     title: 'Dune',
diff --git a/client/src/features/book/components/BookCoverCard.vue b/client/src/features/book/components/BookCoverCard.vue
index 00f732797..f90ec3230 100644
--- a/client/src/features/book/components/BookCoverCard.vue
+++ b/client/src/features/book/components/BookCoverCard.vue
@@ -44,6 +44,7 @@ import { useRefreshMetadata } from '../composables/useRefreshMetadata'
 import { useRefreshingBooks } from '../composables/useRefreshingBooks'
 import { mergeBookCardWithDetail } from '../lib/book-card-mapper'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useDisplaySettings, type GridCardLabelField } from '@/composables/useDisplaySettings'
 import { COVER_ASPECT_RATIO_KEY, DEFAULT_COVER_ASPECT_RATIO, coverAspectRatioValue, fittedCoverFrameStyle } from '../lib/cover-aspect-ratio'
 import { useBookDownload } from '@/features/book/composables/useBookDownload'
@@ -124,6 +125,8 @@ async function handleRefreshMetadata() {
   if (updated) emit('update:book', mergeBookCardWithDetail(props.book, updated))
 }
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
 const { cardOverlays, bookCoverDisplayMode, gridCardPrimaryLabel, gridCardSecondaryLabel, cardInfoMode, thumbnailClickAction } = useDisplaySettings()
 const injectedCoverAspectRatio = inject(COVER_ASPECT_RATIO_KEY, ref(DEFAULT_COVER_ASPECT_RATIO))
 const effectiveCoverAspectRatio = computed<CoverAspectRatio>(
@@ -681,8 +684,8 @@ const secondaryLabelText = computed(() => resolveBookLabel(gridCardSecondaryLabe
                     <BookText class="size-4 mr-2" />
                     {{ t('book.actions.bookDetails') }}
                   </DropdownMenuItem>
-                  <DropdownMenuSeparator v-if="hasPermission('library_edit_metadata')" />
-                  <DropdownMenuSub v-if="hasPermission('library_edit_metadata')">
+                  <DropdownMenuSeparator v-if="canEditMetadata" />
+                  <DropdownMenuSub v-if="canEditMetadata">
                     <DropdownMenuSubTrigger>
                       <Pencil class="size-4 mr-2" />
                       {{ t('book.actions.metadata') }}
@@ -708,7 +711,7 @@ const secondaryLabelText = computed(() => resolveBookLabel(gridCardSecondaryLabe
                     <FolderPlus class="size-4 mr-2" />
                     {{ t('book.actions.addToCollection') }}
                   </DropdownMenuItem>
-                  <DropdownMenuItem v-if="allowMoveToLibrary && hasPermission('library_edit_metadata')" @click="emit('action', 'move-to-library')">
+                  <DropdownMenuItem v-if="allowMoveToLibrary && canEditMetadata" @click="emit('action', 'move-to-library')">
                     <FolderInput class="size-4 mr-2" />
                     {{ t('book.move.action') }}
                   </DropdownMenuItem>
@@ -823,8 +826,8 @@ const secondaryLabelText = computed(() => resolveBookLabel(gridCardSecondaryLabe
               <BookText class="size-4 mr-2" />
               {{ t('book.actions.bookDetails') }}
             </DropdownMenuItem>
-            <DropdownMenuSeparator v-if="hasPermission('library_edit_metadata')" />
-            <DropdownMenuSub v-if="hasPermission('library_edit_metadata')">
+            <DropdownMenuSeparator v-if="canEditMetadata" />
+            <DropdownMenuSub v-if="canEditMetadata">
               <DropdownMenuSubTrigger>
                 <Pencil class="size-4 mr-2" />
                 {{ t('book.actions.metadata') }}
diff --git a/client/src/features/book/components/BookListRow.vue b/client/src/features/book/components/BookListRow.vue
index ce65b4cb5..c0eb6d0be 100644
--- a/client/src/features/book/components/BookListRow.vue
+++ b/client/src/features/book/components/BookListRow.vue
@@ -33,6 +33,7 @@ import { useCoverVersions } from '../composables/useCoverVersions'
 import { COVER_ASPECT_RATIO_KEY, DEFAULT_COVER_ASPECT_RATIO } from '../lib/cover-aspect-ratio'
 import { useRefreshMetadata } from '../composables/useRefreshMetadata'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import SendBookDialog from '@/features/email/components/SendBookDialog.vue'
 import { RATING_STARS, getRatingStarClass } from '@/features/book/lib/rating-stars'
 import { useDisplaySettings } from '@/composables/useDisplaySettings'
@@ -61,6 +62,8 @@ const emit = defineEmits<{
 }>()
 
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
 const { thumbnailClickAction } = useDisplaySettings()
 const showSendDialog = ref(false)
 
@@ -421,19 +424,16 @@ function handleRowClick(event: MouseEvent) {
             {{ t('book.actions.bookDetails') }}
           </DropdownMenuItem>
           <DropdownMenuSeparator />
-          <DropdownMenuItem
-            v-if="hasPermission('library_edit_metadata')"
-            @click="router.push({ name: 'book-detail', params: { bookId: book.id }, query: { tab: 'edit' } })"
-          >
+          <DropdownMenuItem v-if="canEditMetadata" @click="router.push({ name: 'book-detail', params: { bookId: book.id }, query: { tab: 'edit' } })">
             <Pencil class="size-4 mr-2" />
             {{ t('book.actions.editMetadata') }}
           </DropdownMenuItem>
-          <DropdownMenuItem v-if="hasPermission('library_edit_metadata')" :disabled="refreshing" @click="refreshWithFeedback(book.id)">
+          <DropdownMenuItem v-if="canEditMetadata" :disabled="refreshing" @click="refreshWithFeedback(book.id)">
             <Loader2 v-if="refreshing" class="size-4 mr-2 animate-spin" />
             <RefreshCw v-else class="size-4 mr-2" />
             {{ t('book.actions.refreshMetadata') }}
           </DropdownMenuItem>
-          <DropdownMenuItem v-if="allowMoveToLibrary && hasPermission('library_edit_metadata')" @click="emit('action', 'move-to-library')">
+          <DropdownMenuItem v-if="allowMoveToLibrary && canEditMetadata" @click="emit('action', 'move-to-library')">
             <FolderInput class="size-4 mr-2" />
             {{ t('book.move.action') }}
           </DropdownMenuItem>
diff --git a/client/src/features/book/components/BookQuickView.vue b/client/src/features/book/components/BookQuickView.vue
index 29c401b14..eef9b933d 100644
--- a/client/src/features/book/components/BookQuickView.vue
+++ b/client/src/features/book/components/BookQuickView.vue
@@ -3,6 +3,7 @@ import { computed, ref, watch } from 'vue'
 import { useRouter } from 'vue-router'
 import { BookOpen, ExternalLink, Eye, Folder, FolderPlus, Headphones, Pencil, Star, Trash2, X } from '@lucide/vue'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { Sheet, SheetContent, SheetTitle, SheetDescription } from '@/components/ui/sheet'
 import { Skeleton } from '@/components/ui/skeleton'
 import { DialogRoot, DialogContent, DialogPortal, DialogOverlay, DialogClose, DialogTitle, DialogDescription } from 'reka-ui'
@@ -27,6 +28,8 @@ const { t } = useI18n()
 
 const props = defineProps<{ bookId: number | null; open: boolean }>()
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', detail.value?.libraryId, 'editor'))
 const emit = defineEmits<{
   'update:open': [value: boolean]
   action: [type: 'add-to-collection' | 'delete']
@@ -412,7 +415,7 @@ function handleDelete() {
               </TooltipTrigger>
               <TooltipContent>{{ t('book.actions.peek') }}</TooltipContent>
             </Tooltip>
-            <Tooltip v-if="hasPermission('library_edit_metadata')">
+            <Tooltip v-if="canEditMetadata">
               <TooltipTrigger as-child>
                 <button
                   class="flex items-center justify-center gap-1.5 h-9 px-3 rounded-md border border-input bg-background text-sm hover:bg-muted transition-colors"
diff --git a/client/src/features/book/components/VirtualBookTable.vue b/client/src/features/book/components/VirtualBookTable.vue
index e10e08663..e20d9d7bf 100644
--- a/client/src/features/book/components/VirtualBookTable.vue
+++ b/client/src/features/book/components/VirtualBookTable.vue
@@ -35,13 +35,14 @@ import BookTableContextMenu from './table/BookTableContextMenu.vue'
 import BookTableHeader from './table/BookTableHeader.vue'
 import BookTableHeaderContextMenu from './table/BookTableHeaderContextMenu.vue'
 import type { BookCard, Rule, SortSpec, TableLayoutState, TableViewType } from '@bookorbit/types'
-import { BOOK_METADATA_LOCK_FIELDS } from '@bookorbit/types'
+import { BOOK_METADATA_LOCK_FIELDS, Permission } from '@bookorbit/types'
 import { isBookPlaceholder, type BookSlot } from '@/features/book/composables/useBookWindow'
 import { useNarratorSearch } from '@/features/book/composables/useNarratorSearch'
 import { sortFieldLabel } from '@/features/book/lib/filter-labels'
 import { DEFAULT_SORT } from '@/features/book/lib/sort-defaults'
 import { useDisplaySettings } from '@/composables/useDisplaySettings'
 import { useActiveCustomFields } from '@/features/book/composables/useActiveCustomFields'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useI18n } from 'vue-i18n'
 
 const { t } = useI18n()
@@ -144,16 +145,22 @@ const { getSortDir, handleColumnSort, removeSortField } = useTableSorting(
   () => props.defaultSort ?? DEFAULT_SORT,
 )
 const { getQuickFilterOptions, buildQuickFilterRule } = useTableQuickFilters(props.viewType)
+const { hasLibraryPermission } = useLibraryPermissions()
+function canEditBookMetadata(book: BookCard): boolean {
+  return hasLibraryPermission(Permission.LibraryEditMetadata, book.libraryId, 'editor')
+}
 const { getCellValue, isCellLocked, isCellReadOnly, isMandatoryFieldEmpty, isBookFileMissing, getPinnedCellBackground } = useTableCellHelpers(
   locks,
   () => isReadOnly.value,
   () => combinedColumnMap.value,
+  canEditBookMetadata,
 )
 const { coverDialogBook, handleCoverClick, handleCoverDialogUpdateBook } = useTableCoverDialog(
   () => props.selectionMode ?? false,
   (updated) => emit('update:book', updated),
   () => loadedBooks.value,
 )
+const isCoverDialogReadOnly = computed(() => isReadOnly.value || (coverDialogBook.value !== null && !canEditBookMetadata(coverDialogBook.value)))
 
 function getChipsSearchFn(colId: string): (q: string) => Promise<string[]> {
   if (colId === 'authors') return searchAuthors
@@ -605,6 +612,7 @@ function emitLockStateUpdate(book: BookCard, nextFields: BookCard['lockedFields'
 }
 
 async function handleToggleCellLock(book: BookCard, colId: string) {
+  if (!canEditBookMetadata(book)) return
   const lockField = COLUMN_DEF_MAP.get(colId)?.lockField
   if (!lockField) return
   const beforeFields = [...locks.getFields(book.id)]
@@ -615,6 +623,7 @@ async function handleToggleCellLock(book: BookCard, colId: string) {
 }
 
 async function handleLockAllRow(book: BookCard) {
+  if (!canEditBookMetadata(book)) return
   const beforeFields = [...locks.getFields(book.id)]
   await locks.lockAll(book.id)
   const afterFields = [...locks.getFields(book.id)]
@@ -623,6 +632,7 @@ async function handleLockAllRow(book: BookCard) {
 }
 
 async function handleUnlockAllRow(book: BookCard) {
+  if (!canEditBookMetadata(book)) return
   const beforeFields = [...locks.getFields(book.id)]
   await locks.unlockAll(book.id)
   const afterFields = [...locks.getFields(book.id)]
@@ -894,6 +904,7 @@ defineExpose({
                     :is-locked="isCellLocked(rowBook(vItem.index), col.id)"
                     :is-active="editor.isActive(rowBook(vItem.index).id, col.id)"
                     :is-read-only="isCellReadOnly(rowBook(vItem.index), col)"
+                    :can-edit-metadata="canEditBookMetadata(rowBook(vItem.index))"
                     :is-fully-locked="isRowFullyLocked(rowBook(vItem.index))"
                     :locked-field-count="getRowLockedFieldCount(rowBook(vItem.index))"
                     :selection-mode="props.selectionMode ?? false"
@@ -1050,7 +1061,12 @@ defineExpose({
     />
   </div>
 
-  <BookCoverDialog :book="coverDialogBook" :read-only="isReadOnly" @close="coverDialogBook = null" @update:book="handleCoverDialogUpdateBook" />
+  <BookCoverDialog
+    :book="coverDialogBook"
+    :read-only="isCoverDialogReadOnly"
+    @close="coverDialogBook = null"
+    @update:book="handleCoverDialogUpdateBook"
+  />
   <KeyboardShortcutOverlay v-model:open="shortcutOverlayOpen" />
 </template>
 
diff --git a/client/src/features/book/components/__tests__/BookListRowMoveAction.spec.ts b/client/src/features/book/components/__tests__/BookListRowMoveAction.spec.ts
index f1824e9c2..05680c3ea 100644
--- a/client/src/features/book/components/__tests__/BookListRowMoveAction.spec.ts
+++ b/client/src/features/book/components/__tests__/BookListRowMoveAction.spec.ts
@@ -1,4 +1,5 @@
 import { mount } from '@vue/test-utils'
+import { ref } from 'vue'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import type { BookCard } from '@bookorbit/types'
 
@@ -6,12 +7,17 @@ import BookListRow from '../BookListRow.vue'
 
 const { hasPermissionMock } = vi.hoisted(() => ({ hasPermissionMock: vi.fn<(permission: string) => boolean>() }))
 
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 1, accessLevel: 'editor' }]) }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
-  usePermissions: () => ({ hasPermission: hasPermissionMock, isDemoRestrictedAccount: { value: false } }),
+  usePermissions: () => ({ hasPermission: hasPermissionMock, isDemoRestrictedAccount: { value: false }, isSuperuser: { value: false } }),
 }))
 
 const book: BookCard = {
   id: 12,
+  libraryId: 1,
   status: 'present',
   coverAspectRatio: '2/3',
   title: 'Dune',
diff --git a/client/src/features/book/components/__tests__/BookQuickView.spec.ts b/client/src/features/book/components/__tests__/BookQuickView.spec.ts
index 0334cd667..bf4b67f07 100644
--- a/client/src/features/book/components/__tests__/BookQuickView.spec.ts
+++ b/client/src/features/book/components/__tests__/BookQuickView.spec.ts
@@ -29,8 +29,13 @@ vi.mock('vue-router', async (importOriginal) => {
   }
 })
 
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 1, accessLevel: 'editor' }]) }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
   usePermissions: () => ({
+    isSuperuser: { value: false },
     hasPermission: (name: string) => {
       if (name === 'library_delete_books') return permissionState.canDelete
       if (name === 'library_edit_metadata') return permissionState.canEditMetadata
diff --git a/client/src/features/book/components/detail/BookDetailHeader.vue b/client/src/features/book/components/detail/BookDetailHeader.vue
index 85b028753..dae68ae4e 100644
--- a/client/src/features/book/components/detail/BookDetailHeader.vue
+++ b/client/src/features/book/components/detail/BookDetailHeader.vue
@@ -6,7 +6,7 @@ import { useI18n } from 'vue-i18n'
 import BookDetailTabs from './BookDetailTabs.vue'
 import { useBookNavigation } from '../../composables/useBookNavigation'
 
-const props = defineProps<{ bookId: number }>()
+const props = defineProps<{ bookId: number; canEditMetadata?: boolean }>()
 
 const { t } = useI18n()
 const route = useRoute()
@@ -36,7 +36,7 @@ async function navigateToBook(id: number) {
   <div
     class="flex items-stretch border-b shrink-0 h-10 md:h-9 px-3 pl-[max(0.75rem,env(safe-area-inset-left))] pr-[max(0.75rem,env(safe-area-inset-right))] md:px-3"
   >
-    <BookDetailTabs :book-id="bookId" />
+    <BookDetailTabs :book-id="bookId" :can-edit-metadata="canEditMetadata" />
 
     <div v-if="hasContext" class="hidden sm:flex items-center gap-1 ml-4 border-l pl-4">
       <span v-if="index !== -1" class="text-xs text-muted-foreground mr-2 font-medium tabular-nums">
diff --git a/client/src/features/book/components/detail/BookDetailLayout.vue b/client/src/features/book/components/detail/BookDetailLayout.vue
index 752619fea..7b1eef21a 100644
--- a/client/src/features/book/components/detail/BookDetailLayout.vue
+++ b/client/src/features/book/components/detail/BookDetailLayout.vue
@@ -3,7 +3,7 @@ import BookDetailHeader from './BookDetailHeader.vue'
 import { coverTintVars, type CoverTint } from '@/features/book/lib/cover-tint'
 import { computed } from 'vue'
 
-const props = withDefaults(defineProps<{ bookId: number; coverTint?: CoverTint | null }>(), { coverTint: null })
+const props = withDefaults(defineProps<{ bookId: number; canEditMetadata?: boolean; coverTint?: CoverTint | null }>(), { coverTint: null })
 
 const tintVars = computed(() => coverTintVars(props.coverTint))
 </script>
@@ -16,7 +16,7 @@ const tintVars = computed(() => coverTintVars(props.coverTint))
     ]"
     :style="tintVars"
   >
-    <BookDetailHeader :book-id="bookId" />
+    <BookDetailHeader :book-id="bookId" :can-edit-metadata="canEditMetadata" />
     <main class="flex-1 overflow-y-auto overflow-x-hidden p-4 sm:px-6 sm:py-4">
       <slot />
     </main>
diff --git a/client/src/features/book/components/detail/BookDetailTabs.vue b/client/src/features/book/components/detail/BookDetailTabs.vue
index 22747eed9..570872f67 100644
--- a/client/src/features/book/components/detail/BookDetailTabs.vue
+++ b/client/src/features/book/components/detail/BookDetailTabs.vue
@@ -3,19 +3,20 @@ import { computed } from 'vue'
 import { useRoute, useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { normalizeBookDetailTab, type BookDetailTab } from '@/features/book/lib/book-detail-tabs'
-import { usePermissions } from '@/features/auth/composables/usePermissions'
 
-const props = defineProps<{ bookId: number }>()
+const props = defineProps<{ bookId: number; canEditMetadata?: boolean }>()
 const route = useRoute()
 const router = useRouter()
 const { t } = useI18n()
-const { hasPermission } = usePermissions()
 
-const activeTab = computed(() => normalizeBookDetailTab(route.query.tab))
+const activeTab = computed(() => {
+  const requested = normalizeBookDetailTab(route.query.tab)
+  return requested === 'edit' && !props.canEditMetadata ? 'details' : requested
+})
 
 const tabs = computed<{ label: string; tab: BookDetailTab }[]>(() => {
   const result: { label: string; tab: BookDetailTab }[] = [{ label: t('book.detail.tabs.details'), tab: 'details' }]
-  if (hasPermission('library_edit_metadata')) {
+  if (props.canEditMetadata) {
     result.push({ label: t('book.detail.tabs.editMetadata'), tab: 'edit' })
   }
   result.push({ label: t('book.detail.tabs.files'), tab: 'files' })
diff --git a/client/src/features/book/components/detail/tabs/AddBookFileModal.vue b/client/src/features/book/components/detail/tabs/AddBookFileModal.vue
index 1f108b386..1e61c0051 100644
--- a/client/src/features/book/components/detail/tabs/AddBookFileModal.vue
+++ b/client/src/features/book/components/detail/tabs/AddBookFileModal.vue
@@ -2,14 +2,13 @@
 import { computed, onMounted, onUnmounted, ref } from 'vue'
 import { CheckCircle2, FileUp, Loader2, Plus, Upload, X, XCircle, RotateCcw } from '@lucide/vue'
 import { useI18n } from 'vue-i18n'
-import { Permission } from '@bookorbit/types'
 import { SUPPORTED_FORMATS_ACCEPT, useAddBookFile } from '@/features/book/composables/useAddBookFile'
-import { usePermissions } from '@/features/auth/composables/usePermissions'
 import { useAppInfo } from '@/features/settings/composables/useAppInfo'
 import { formatBytes } from '@/lib/formatting'
 
 const props = defineProps<{
   bookId: number
+  canRenameFiles: boolean
 }>()
 
 const emit = defineEmits<{
@@ -18,7 +17,6 @@ const emit = defineEmits<{
 }>()
 
 const { t } = useI18n()
-const { hasPermission } = usePermissions()
 const { maxUploadSizeMb } = useAppInfo()
 
 const isDragging = ref(false)
@@ -91,7 +89,7 @@ function onFileInputChange(e: Event) {
 
 async function handleUpload() {
   if (pendingCount.value === 0 || isUploading.value) return
-  await startUpload(props.bookId, { renameAfter: renameAfter.value })
+  await startUpload(props.bookId, { renameAfter: props.canRenameFiles && renameAfter.value })
 }
 
 function fileRowClass(status: string): string {
@@ -288,7 +286,7 @@ function formatPillClass(filename: string): string {
             <span v-else-if="isUploading" class="text-xs text-muted-foreground tabular-nums">{{
               t('book.detail.addFile.uploadingProgress', { done: doneCount, total: files.length })
             }}</span>
-            <label v-else-if="hasPermission(Permission.LibraryEditMetadata)" class="flex items-center gap-2 cursor-pointer select-none">
+            <label v-else-if="canRenameFiles" class="flex items-center gap-2 cursor-pointer select-none">
               <input
                 v-model="renameAfter"
                 type="checkbox"
diff --git a/client/src/features/book/components/detail/tabs/DetailsTab.vue b/client/src/features/book/components/detail/tabs/DetailsTab.vue
index fceaffe91..e54bee988 100644
--- a/client/src/features/book/components/detail/tabs/DetailsTab.vue
+++ b/client/src/features/book/components/detail/tabs/DetailsTab.vue
@@ -45,6 +45,7 @@ import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuTrigge
 import { api } from '@/lib/api'
 import { useAuth } from '@/features/auth/composables/useAuth'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useDeleteBook } from '@/features/book/composables/useDeleteBook'
 import { useMetadataLocks } from '@/features/book/composables/useMetadataLocks'
 import { usePersonalNote, PERSONAL_NOTE_MAX_LENGTH } from '@/features/book/composables/usePersonalNote'
@@ -255,6 +256,7 @@ onBeforeUnmount(() => {
 })
 
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
 const { load: loadLocks, isLocked } = useMetadataLocks()
 watch(
   () => props.book,
@@ -265,7 +267,8 @@ watch(
 const isRatingLocked = computed(() => isLocked('rating'))
 const canViewKobo = computed(() => hasPermission('kobo_sync'))
 const canViewKoreader = computed(() => hasPermission('koreader_sync'))
-const canEditMetadata = computed(() => hasPermission('library_edit_metadata'))
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
+const canManageReadingState = computed(() => hasPermission('library_edit_metadata'))
 const resetReadingStateBookId = computed(() => props.book.id)
 const {
   open: resetReadingStateDialogOpen,
@@ -1030,6 +1033,7 @@ function handleCoverLightboxOpenChange(open: boolean) {
 }
 
 function openEditCover() {
+  if (!canEditMetadata.value) return
   router.push({ name: 'book-detail', params: { bookId: props.book.id }, query: { tab: 'edit' } })
 }
 
@@ -1246,7 +1250,7 @@ watch(
                 :aria-label="t('book.detail.details.viewCover')"
                 @click="handleCoverClick"
               />
-              <Tooltip>
+              <Tooltip v-if="canEditMetadata">
                 <TooltipTrigger as-child>
                   <button
                     class="absolute top-1.5 right-1.5 z-10 p-1 rounded-xs bg-black/50 text-white opacity-0 group-hover:opacity-100 focus-visible:opacity-100 transition-opacity"
@@ -1428,7 +1432,11 @@ watch(
             >
               <Send class="size-3.5" />
             </button>
-            <Popover v-if="canEditMetadata || hasPermission('library_delete_books')" :open="moreMenuOpen" @update:open="(v) => (moreMenuOpen = v)">
+            <Popover
+              v-if="canManageReadingState || canEditMetadata || hasPermission('library_delete_books')"
+              :open="moreMenuOpen"
+              @update:open="(v) => (moreMenuOpen = v)"
+            >
               <PopoverTrigger as-child>
                 <button
                   class="flex flex-1 items-center justify-center h-9 rounded-md border border-border bg-background text-foreground hover:bg-muted transition-colors"
@@ -1438,7 +1446,7 @@ watch(
               </PopoverTrigger>
               <PopoverContent class="w-44 p-1" align="end">
                 <button
-                  v-if="canEditMetadata"
+                  v-if="canManageReadingState"
                   class="flex w-full items-center gap-2 px-2 py-1.5 rounded-xs text-sm text-foreground hover:bg-muted transition-colors"
                   @click="handleOpenResetReadingState"
                 >
@@ -1446,7 +1454,7 @@ watch(
                   Reset reading state
                 </button>
                 <button
-                  v-if="hasPermission('library_edit_metadata')"
+                  v-if="canEditMetadata"
                   class="flex w-full items-center gap-2 px-2 py-1.5 rounded-xs text-sm hover:bg-muted transition-colors"
                   @click="handleMoveFromMenu"
                 >
diff --git a/client/src/features/book/components/detail/tabs/FilesTab.vue b/client/src/features/book/components/detail/tabs/FilesTab.vue
index 68741b9fb..ae9ad7b38 100644
--- a/client/src/features/book/components/detail/tabs/FilesTab.vue
+++ b/client/src/features/book/components/detail/tabs/FilesTab.vue
@@ -10,6 +10,7 @@ import { api } from '@/lib/api'
 import { copyToClipboard } from '@/lib/clipboard'
 import { useBookDownload } from '@/features/book/composables/useBookDownload'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useBookFileTree, type SortKey, type TreeFile } from '@/features/book/composables/useBookFileTree'
 import { findFileWriteTarget } from '@/features/book/lib/file-write-targets'
 import FilesHeroBar from '../files/FilesHeroBar.vue'
@@ -25,6 +26,8 @@ const { t } = useI18n()
 const router = useRouter()
 const { downloadFile: downloadBookFile } = useBookDownload()
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
 
 const book = toRef(props, 'book')
 const {
@@ -45,7 +48,7 @@ const {
 
 const canUpload = computed(() => hasPermission(Permission.LibraryUpload))
 const canDownload = computed(() => hasPermission('library_download'))
-const canEdit = computed(() => hasPermission('library_edit_metadata'))
+const canEdit = canEditMetadata
 const canDelete = computed(() => hasPermission('library_delete_books'))
 
 /**
@@ -388,7 +391,13 @@ async function confirmDelete() {
     </div>
   </div>
 
-  <AddBookFileModal v-if="addFileModalOpen" :book-id="book.id" @close="closeAddFileModal" @uploaded="onFilesAdded" />
+  <AddBookFileModal
+    v-if="addFileModalOpen"
+    :book-id="book.id"
+    :can-rename-files="canEditMetadata"
+    @close="closeAddFileModal"
+    @uploaded="onFilesAdded"
+  />
 </template>
 
 <style scoped>
diff --git a/client/src/features/book/components/detail/tabs/__tests__/DetailsTab.spec.ts b/client/src/features/book/components/detail/tabs/__tests__/DetailsTab.spec.ts
index 957f7ddeb..079106653 100644
--- a/client/src/features/book/components/detail/tabs/__tests__/DetailsTab.spec.ts
+++ b/client/src/features/book/components/detail/tabs/__tests__/DetailsTab.spec.ts
@@ -1,6 +1,6 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { flushPromises, shallowMount } from '@vue/test-utils'
-import { defineComponent } from 'vue'
+import { defineComponent, ref } from 'vue'
 import type { BookDetail } from '@bookorbit/types'
 import DetailsTab from '../DetailsTab.vue'
 import BookReadingActivityCard from '../../details/BookReadingActivityCard.vue'
@@ -26,8 +26,17 @@ vi.mock('@/lib/api', () => ({
   api: mocks.api,
 }))
 
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({
+    libraries: ref([
+      { id: 1, accessLevel: 'editor' },
+      { id: 2, accessLevel: 'viewer' },
+    ]),
+  }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
-  usePermissions: () => ({ hasPermission: mocks.hasPermission }),
+  usePermissions: () => ({ hasPermission: mocks.hasPermission, isSuperuser: { value: false } }),
 }))
 
 vi.mock('@/features/auth/composables/useAuth', () => ({
@@ -724,6 +733,16 @@ describe('DetailsTab cover surface', () => {
     expect(wrapper.findAll('button').some((button) => button.text().includes('Reset reading state'))).toBe(false)
   })
 
+  it('keeps personal reading reset available to viewers while hiding library metadata controls', async () => {
+    mocks.hasPermission.mockImplementation((permission) => permission === 'library_edit_metadata')
+    const wrapper = mountDetails(makeBook({ libraryId: 2 }))
+    await flushPromises()
+
+    expect(wrapper.findAll('button').some((button) => button.text().includes('Reset reading state'))).toBe(true)
+    expect(wrapper.find('button[aria-label="Edit date added"]').exists()).toBe(false)
+    expect(wrapper.find('button[aria-label="Edit cover"]').exists()).toBe(false)
+  })
+
   it('edits and saves the added date inline', async () => {
     const updated = makeBook({ addedAt: '2020-06-15T00:00:00.000Z', updatedAt: '2026-08-05T12:00:00.000Z' })
     mocks.api.mockImplementation(async (input) => {
diff --git a/client/src/features/book/components/detail/tabs/__tests__/DetailsTabActions.spec.ts b/client/src/features/book/components/detail/tabs/__tests__/DetailsTabActions.spec.ts
index 3dbfe50fb..659da73d5 100644
--- a/client/src/features/book/components/detail/tabs/__tests__/DetailsTabActions.spec.ts
+++ b/client/src/features/book/components/detail/tabs/__tests__/DetailsTabActions.spec.ts
@@ -1,5 +1,6 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import { shallowMount } from '@vue/test-utils'
+import { ref } from 'vue'
 import type { BookDetail } from '@bookorbit/types'
 
 const mocks = vi.hoisted(() => ({
@@ -16,7 +17,12 @@ vi.mock('vue-router', async (importOriginal) => {
 })
 
 vi.mock('@/lib/api', () => ({ api: mocks.api, setOnAuthFailure: vi.fn<(callback: () => void) => void>() }))
-vi.mock('@/features/auth/composables/usePermissions', () => ({ usePermissions: () => ({ hasPermission: mocks.hasPermission }) }))
+vi.mock('@/features/auth/composables/usePermissions', () => ({
+  usePermissions: () => ({ hasPermission: mocks.hasPermission, isSuperuser: ref(false) }),
+}))
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 3, accessLevel: 'editor' }]) }),
+}))
 
 vi.mock('@/features/book/composables/useDeleteBook', () => ({
   useDeleteBook: (onDeleted: (id: number) => void) => {
diff --git a/client/src/features/book/components/table/BookTableActionsCell.vue b/client/src/features/book/components/table/BookTableActionsCell.vue
index d6c2eb80a..56cc5b942 100644
--- a/client/src/features/book/components/table/BookTableActionsCell.vue
+++ b/client/src/features/book/components/table/BookTableActionsCell.vue
@@ -6,6 +6,7 @@ import { BookOpen, ExternalLink, FolderPlus, MoreHorizontal, Pencil, RefreshCw,
 import { DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuSeparator, DropdownMenuTrigger } from '@/components/ui/dropdown-menu'
 import { Button } from '@/components/ui/button'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useRefreshMetadata } from '@/features/book/composables/useRefreshMetadata'
 import { useBookRefreshFeedback } from '@/features/book/composables/useBookRefreshFeedback'
 import { useRefreshingBooks } from '@/features/book/composables/useRefreshingBooks'
@@ -27,6 +28,8 @@ const router = useRouter()
 
 const { t } = useI18n()
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
 const { refreshWithFeedback, refreshing } = useRefreshMetadata()
 const refreshFeedback = useBookRefreshFeedback()
 const { isRefreshing } = useRefreshingBooks()
@@ -67,15 +70,12 @@ async function handleRefresh() {
           <ExternalLink :size="13" class="mr-2" />
           {{ t('book.table.actions.bookDetails') }}
         </DropdownMenuItem>
-        <DropdownMenuSeparator v-if="hasPermission('library_edit_metadata')" />
-        <DropdownMenuItem
-          v-if="hasPermission('library_edit_metadata')"
-          @click="router.push({ name: 'book-detail', params: { bookId: book.id }, query: { tab: 'edit' } })"
-        >
+        <DropdownMenuSeparator v-if="canEditMetadata" />
+        <DropdownMenuItem v-if="canEditMetadata" @click="router.push({ name: 'book-detail', params: { bookId: book.id }, query: { tab: 'edit' } })">
           <Pencil :size="13" class="mr-2" />
           {{ t('book.table.actions.editMetadata') }}
         </DropdownMenuItem>
-        <DropdownMenuItem v-if="hasPermission('library_edit_metadata')" :disabled="anyRefreshing" @click="handleRefresh">
+        <DropdownMenuItem v-if="canEditMetadata" :disabled="anyRefreshing" @click="handleRefresh">
           <RefreshCw :size="13" class="mr-2" :class="{ 'animate-spin': anyRefreshing }" />
           {{ t('book.table.actions.refreshMetadata') }}
         </DropdownMenuItem>
diff --git a/client/src/features/book/components/table/BookTableCellDispatcher.vue b/client/src/features/book/components/table/BookTableCellDispatcher.vue
index 098b388d2..b57cd6f51 100644
--- a/client/src/features/book/components/table/BookTableCellDispatcher.vue
+++ b/client/src/features/book/components/table/BookTableCellDispatcher.vue
@@ -31,6 +31,7 @@ const props = defineProps<{
   isLocked: boolean
   isActive: boolean
   isReadOnly: boolean
+  canEditMetadata: boolean
   isFullyLocked: boolean
   lockedFieldCount: number
   selectionMode: boolean
@@ -86,6 +87,7 @@ const lockStateClass = computed(() => {
 })
 
 function handleToggleAllLocks() {
+  if (!props.canEditMetadata) return
   if (props.isFullyLocked) {
     emit('unlockAll')
     return
@@ -104,8 +106,9 @@ const isComic = computed(() => primaryFile.value?.format != null && FORMAT_TO_GR
       <TooltipTrigger as-child>
         <button
           type="button"
-          class="flex h-6 w-6 items-center justify-center rounded-xs transition-colors hover:bg-muted"
+          class="flex h-6 w-6 items-center justify-center rounded-xs transition-colors hover:bg-muted disabled:pointer-events-none"
           :class="lockStateClass"
+          :disabled="!canEditMetadata"
           :aria-label="isFullyLocked ? t('book.table.locks.unlockAll') : t('book.table.locks.lockAll')"
           @click.stop="handleToggleAllLocks"
         >
@@ -128,7 +131,13 @@ const isComic = computed(() => primaryFile.value?.format != null && FORMAT_TO_GR
     @cover-click="emit('coverClick')"
   />
 
-  <BookTableLockableCell v-else-if="cellType === 'text'" :is-locked="isLocked" :has-lock-field="hasLockField" @toggle-lock="emit('toggleLock')">
+  <BookTableLockableCell
+    v-else-if="cellType === 'text'"
+    :is-locked="isLocked"
+    :has-lock-field="hasLockField"
+    :read-only="!canEditMetadata"
+    @toggle-lock="emit('toggleLock')"
+  >
     <BookTableTextCell
       :value="asString(value)"
       :is-active="isActive"
@@ -146,7 +155,13 @@ const isComic = computed(() => primaryFile.value?.format != null && FORMAT_TO_GR
 
   <BookTableMetadataScoreCell v-else-if="colId === 'metadataScore'" :value="asNumber(value)" />
 
-  <BookTableLockableCell v-else-if="cellType === 'number'" :is-locked="isLocked" :has-lock-field="hasLockField" @toggle-lock="emit('toggleLock')">
+  <BookTableLockableCell
+    v-else-if="cellType === 'number'"
+    :is-locked="isLocked"
+    :has-lock-field="hasLockField"
+    :read-only="!canEditMetadata"
+    @toggle-lock="emit('toggleLock')"
+  >
     <BookTableNumberCell
       :value="asNumberInput(value)"
       :is-active="isActive"
@@ -159,11 +174,23 @@ const isComic = computed(() => primaryFile.value?.format != null && FORMAT_TO_GR
     />
   </BookTableLockableCell>
 
-  <BookTableLockableCell v-else-if="cellType === 'rating'" :is-locked="isLocked" :has-lock-field="hasLockField" @toggle-lock="emit('toggleLock')">
+  <BookTableLockableCell
+    v-else-if="cellType === 'rating'"
+    :is-locked="isLocked"
+    :has-lock-field="hasLockField"
+    :read-only="!canEditMetadata"
+    @toggle-lock="emit('toggleLock')"
+  >
     <BookTableRatingCell :value="asNumber(value)" :is-read-only="isReadOnly" @save="emit('save', $event)" />
   </BookTableLockableCell>
 
-  <BookTableLockableCell v-else-if="cellType === 'chips'" :is-locked="isLocked" :has-lock-field="hasLockField" @toggle-lock="emit('toggleLock')">
+  <BookTableLockableCell
+    v-else-if="cellType === 'chips'"
+    :is-locked="isLocked"
+    :has-lock-field="hasLockField"
+    :read-only="!canEditMetadata"
+    @toggle-lock="emit('toggleLock')"
+  >
     <BookTableChipsCell
       :value="asStringArray(value)"
       :is-active="isActive"
diff --git a/client/src/features/book/components/table/BookTableContextMenu.vue b/client/src/features/book/components/table/BookTableContextMenu.vue
index d396fc628..77b90c2b1 100644
--- a/client/src/features/book/components/table/BookTableContextMenu.vue
+++ b/client/src/features/book/components/table/BookTableContextMenu.vue
@@ -4,6 +4,7 @@ import { useI18n } from 'vue-i18n'
 import { useRouter } from 'vue-router'
 import { BookOpen, ExternalLink, FolderInput, FolderPlus, Pencil, RefreshCw, Send, Trash2 } from '@lucide/vue'
 import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useRefreshMetadata } from '@/features/book/composables/useRefreshMetadata'
 import { useBookRefreshFeedback } from '@/features/book/composables/useBookRefreshFeedback'
 import { useRefreshingBooks } from '@/features/book/composables/useRefreshingBooks'
@@ -27,6 +28,8 @@ const emit = defineEmits<{
 const router = useRouter()
 const { t } = useI18n()
 const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', props.book?.libraryId, 'editor'))
 const { refreshWithFeedback, refreshing } = useRefreshMetadata()
 const refreshFeedback = useBookRefreshFeedback()
 const { isRefreshing } = useRefreshingBooks()
@@ -159,7 +162,7 @@ onBeforeUnmount(() => {
         {{ t('book.table.actions.bookDetails') }}
       </button>
       <button
-        v-if="hasPermission('library_edit_metadata')"
+        v-if="canEditMetadata"
         class="flex w-full items-center gap-2 rounded-xs px-2 py-1.5 text-left text-sm hover:bg-accent"
         @click="openEditMetadata"
       >
@@ -167,7 +170,7 @@ onBeforeUnmount(() => {
         {{ t('book.table.actions.editMetadata') }}
       </button>
       <button
-        v-if="hasPermission('library_edit_metadata')"
+        v-if="canEditMetadata"
         class="flex w-full items-center gap-2 rounded-xs px-2 py-1.5 text-left text-sm hover:bg-accent"
         :disabled="anyRefreshing"
         @click="refreshMetadata"
@@ -183,7 +186,7 @@ onBeforeUnmount(() => {
         {{ t('book.table.actions.addToCollection') }}
       </button>
       <button
-        v-if="hasPermission('library_edit_metadata')"
+        v-if="canEditMetadata"
         class="flex w-full items-center gap-2 rounded-xs px-2 py-1.5 text-left text-sm hover:bg-accent"
         @click="emitAction('move-to-library')"
       >
diff --git a/client/src/features/book/components/table/BookTableLockableCell.vue b/client/src/features/book/components/table/BookTableLockableCell.vue
index 5b8bff000..53f234f4c 100644
--- a/client/src/features/book/components/table/BookTableLockableCell.vue
+++ b/client/src/features/book/components/table/BookTableLockableCell.vue
@@ -8,6 +8,7 @@ const { t } = useI18n()
 defineProps<{
   isLocked: boolean
   hasLockField: boolean
+  readOnly?: boolean
 }>()
 
 defineEmits<{
@@ -26,7 +27,8 @@ defineEmits<{
           type="button"
           :aria-pressed="isLocked"
           :aria-label="isLocked ? t('book.table.locks.unlockField') : t('book.table.locks.lockField')"
-          class="flex h-4 w-4 shrink-0 items-center justify-center rounded-sm transition-colors"
+          class="flex h-4 w-4 shrink-0 items-center justify-center rounded-sm transition-colors disabled:pointer-events-none"
+          :disabled="readOnly"
           :class="
             isLocked ? 'text-primary hover:text-primary' : 'opacity-0 text-muted-foreground group-hover/cell:opacity-100 hover:text-muted-foreground'
           "
diff --git a/client/src/features/book/components/table/__tests__/BookTableCellDispatcher.spec.ts b/client/src/features/book/components/table/__tests__/BookTableCellDispatcher.spec.ts
index f783d6042..03b64ecb2 100644
--- a/client/src/features/book/components/table/__tests__/BookTableCellDispatcher.spec.ts
+++ b/client/src/features/book/components/table/__tests__/BookTableCellDispatcher.spec.ts
@@ -47,6 +47,7 @@ const baseProps = {
   isLocked: false,
   isActive: false,
   isReadOnly: false,
+  canEditMetadata: true,
   isFullyLocked: false,
   lockedFieldCount: 0,
   selectionMode: false,
@@ -102,6 +103,18 @@ describe('BookTableCellDispatcher lock row', () => {
     expect(wrapper.emitted('unlockAll')).toBeFalsy()
   })
 
+  it('disables the row lock toggle when the book sits in a library the user can only read', async () => {
+    const wrapper = mountDispatcher({ isFullyLocked: false, lockedFieldCount: 2, canEditMetadata: false })
+    const button = wrapper.get('button')
+
+    expect(button.attributes('disabled')).toBeDefined()
+    expect(button.classes()).toContain('text-amber-600/90')
+
+    await button.trigger('click')
+    expect(wrapper.emitted('lockAll')).toBeFalsy()
+    expect(wrapper.emitted('unlockAll')).toBeFalsy()
+  })
+
   it('passes the comic flag to the cover cell for comic primary files', () => {
     const book = makeBook({ files: [{ id: 1, format: 'cbz', role: 'primary', sizeBytes: null }] })
     const wrapper = mountDispatcher({ book, colId: 'cover' as const, cellType: 'cover' as const })
diff --git a/client/src/features/book/components/table/__tests__/BookTableContextMenu.spec.ts b/client/src/features/book/components/table/__tests__/BookTableContextMenu.spec.ts
index d66c6f272..0af14a0cf 100644
--- a/client/src/features/book/components/table/__tests__/BookTableContextMenu.spec.ts
+++ b/client/src/features/book/components/table/__tests__/BookTableContextMenu.spec.ts
@@ -1,4 +1,5 @@
 import { mount } from '@vue/test-utils'
+import { ref } from 'vue'
 import { beforeEach, describe, expect, it, vi } from 'vitest'
 import type { BookCard } from '@bookorbit/types'
 
@@ -6,8 +7,12 @@ import BookTableContextMenu from '../BookTableContextMenu.vue'
 
 const { hasPermissionMock } = vi.hoisted(() => ({ hasPermissionMock: vi.fn<(permission: string) => boolean>() }))
 
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 1, accessLevel: 'editor' }]) }),
+}))
+
 vi.mock('@/features/auth/composables/usePermissions', () => ({
-  usePermissions: () => ({ hasPermission: hasPermissionMock, isDemoRestrictedAccount: { value: false } }),
+  usePermissions: () => ({ hasPermission: hasPermissionMock, isDemoRestrictedAccount: { value: false }, isSuperuser: { value: false } }),
 }))
 
 vi.mock('vue-router', () => ({ useRouter: () => ({ push: vi.fn<(to: unknown) => void>() }) }))
@@ -28,7 +33,7 @@ vi.mock('@/features/book/composables/useRefreshingBooks', () => ({
   useRefreshingBooks: () => ({ isRefreshing: () => false }),
 }))
 
-const book = { id: 7, title: 'Dune' } as BookCard
+const book = { id: 7, libraryId: 1, title: 'Dune' } as BookCard
 
 function mountMenu() {
   return mount(BookTableContextMenu, {
diff --git a/client/src/features/book/composables/__tests__/useBookSelectionPermissions.spec.ts b/client/src/features/book/composables/__tests__/useBookSelectionPermissions.spec.ts
new file mode 100644
index 000000000..c4aa2027e
--- /dev/null
+++ b/client/src/features/book/composables/__tests__/useBookSelectionPermissions.spec.ts
@@ -0,0 +1,134 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { ref } from 'vue'
+import { Permission, type BookCard, type Library } from '@bookorbit/types'
+import type { QuerySelectionState } from '../useBookBulkActions'
+
+const libraries = ref<Library[]>([])
+const permissions = ref<string[]>([Permission.LibraryEditMetadata])
+const isSuperuser = ref(false)
+vi.mock('@/features/library/composables/useLibraries', () => ({ useLibraries: () => ({ libraries }) }))
+vi.mock('@/features/auth/composables/usePermissions', () => ({
+  usePermissions: () => ({ hasPermission: (permission: string) => isSuperuser.value || permissions.value.includes(permission), isSuperuser }),
+}))
+const { useBookSelectionPermissions } = await import('../useBookSelectionPermissions')
+
+beforeEach(() => {
+  permissions.value = [Permission.LibraryEditMetadata]
+  isSuperuser.value = false
+  libraries.value = [
+    { id: 7, type: 'books', accessLevel: 'editor' },
+    { id: 8, type: 'books', accessLevel: 'viewer' },
+    { id: 9, type: 'books', accessLevel: 'owner' },
+  ] as Library[]
+})
+
+function context(ids: number[] = [1]) {
+  const books = ref<BookCard[]>([
+    { id: 1, libraryId: 7 },
+    { id: 2, libraryId: 8 },
+    { id: 3, libraryId: 9 },
+  ] as BookCard[])
+  const selectedIds = ref(new Set(ids))
+  const query = ref<QuerySelectionState | null>(null)
+  return { books, selectedIds, query, ...useBookSelectionPermissions(books, selectedIds, query) }
+}
+
+describe('metadata permissions for bulk selections', () => {
+  it('permits an editor and owner selection and rejects a mixed viewer selection', () => {
+    const ctx = context([1, 3])
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    ctx.selectedIds.value.add(2)
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it.each([{ ids: [] }, { ids: [99] }])('fails closed for empty or unresolved selection $ids', ({ ids }) => {
+    expect(context(ids).canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('fails closed when a card from an older server has no library ID', () => {
+    const ctx = context()
+    delete ctx.books.value[0]!.libraryId
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('checks the query scope even when the visible page belongs to an editor', () => {
+    const ctx = context()
+    ctx.query.value = { libraryId: 8, total: 10000 } as QuerySelectionState
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    ctx.query.value = { libraryId: 7, total: 10000 } as QuerySelectionState
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+  })
+
+  it('requires editor access to every accessible library for an unscoped query', () => {
+    const ctx = context()
+    ctx.query.value = { total: 10000 } as QuerySelectionState
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    libraries.value[1]!.accessLevel = 'editor'
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    libraries.value = []
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('ignores podcast libraries when checking an unscoped book query', () => {
+    const ctx = context()
+    libraries.value = [
+      { id: 7, type: 'books', accessLevel: 'editor' },
+      { id: 10, type: 'podcasts', accessLevel: 'viewer' },
+    ] as Library[]
+    ctx.query.value = { total: 10000 } as QuerySelectionState
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+  })
+
+  it('reacts to global permission revocation and library-role downgrade', () => {
+    const ctx = context()
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    permissions.value = []
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    permissions.value = [Permission.LibraryEditMetadata]
+    libraries.value[0]!.accessLevel = 'viewer'
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('retains editor scope when sorting or filtering replaces loaded cards', () => {
+    const ctx = context([1, 3])
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    ctx.books.value = [{ id: 2, libraryId: 8 }] as BookCard[]
+    expect(ctx.selectedIds.value.size).toBe(2)
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    libraries.value[0]!.accessLevel = 'viewer'
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    libraries.value[0]!.accessLevel = 'editor'
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    permissions.value = []
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('retains viewer restrictions after the selected card leaves the window', () => {
+    const ctx = context([1, 2])
+    ctx.books.value = [{ id: 3, libraryId: 9 }] as BookCard[]
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    ctx.selectedIds.value.delete(2)
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+  })
+
+  it('discards cached scope when a book is deselected', () => {
+    const ctx = context()
+    ctx.books.value = []
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    ctx.selectedIds.value.clear()
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    ctx.selectedIds.value.add(1)
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    ctx.books.value = [{ id: 1, libraryId: 8 }] as BookCard[]
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+
+  it('updates retained scope when a selected book moves into a viewer library', () => {
+    const ctx = context()
+    expect(ctx.canEditSelectionMetadata.value).toBe(true)
+    ctx.books.value[0]!.libraryId = 8
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+    ctx.books.value = []
+    expect(ctx.canEditSelectionMetadata.value).toBe(false)
+  })
+})
diff --git a/client/src/features/book/composables/__tests__/useBookTableShell.spec.ts b/client/src/features/book/composables/__tests__/useBookTableShell.spec.ts
index 1589be131..33ca3d253 100644
--- a/client/src/features/book/composables/__tests__/useBookTableShell.spec.ts
+++ b/client/src/features/book/composables/__tests__/useBookTableShell.spec.ts
@@ -33,6 +33,13 @@ vi.mock('vue-router', () => ({
   useRouter: () => ({ push: mocks.routerPush }),
 }))
 
+vi.mock('@/features/auth/composables/usePermissions', () => ({
+  usePermissions: () => ({ hasPermission: () => true, isSuperuser: ref(false) }),
+}))
+vi.mock('@/features/library/composables/useLibraries', () => ({
+  useLibraries: () => ({ libraries: ref([{ id: 7, accessLevel: 'editor' }]) }),
+}))
+
 vi.mock('../useBookNavigation', () => ({
   useBookNavigation: () => ({ setBookContext: mocks.setBookContext }),
 }))
@@ -78,6 +85,7 @@ import { useBookTableShell } from '../useBookTableShell'
 function makeBook(overrides: Partial<BookCard> = {}): BookCard {
   return {
     id: 1,
+    libraryId: 7,
     status: 'present',
     coverAspectRatio: '2/3',
     title: 'Test Book',
diff --git a/client/src/features/book/composables/__tests__/useTableCellHelpers.spec.ts b/client/src/features/book/composables/__tests__/useTableCellHelpers.spec.ts
index d24427cef..040a1edd2 100644
--- a/client/src/features/book/composables/__tests__/useTableCellHelpers.spec.ts
+++ b/client/src/features/book/composables/__tests__/useTableCellHelpers.spec.ts
@@ -134,6 +134,15 @@ describe('useTableCellHelpers', () => {
       expect(helpers.isCellReadOnly(book, { id: 'title', isEditable: true })).toBe(true)
     })
 
+    it('locks metadata columns on rows whose library the user can only read, but keeps personal reading state editable', () => {
+      const canEdit = vi.fn<(book: BookCard) => boolean>((book) => book.libraryId === 1)
+      helpers = useTableCellHelpers(locks, () => false, undefined, canEdit)
+
+      expect(helpers.isCellReadOnly(makeBook({ libraryId: 2 }), { id: 'title', isEditable: true })).toBe(true)
+      expect(helpers.isCellReadOnly(makeBook({ libraryId: 2 }), { id: 'readStatus', isEditable: true })).toBe(false)
+      expect(helpers.isCellReadOnly(makeBook({ libraryId: 1 }), { id: 'title', isEditable: true })).toBe(false)
+    })
+
     it('returns true when isReadOnly global flag is set', () => {
       isReadOnly = true
       const book = makeBook()
diff --git a/client/src/features/book/composables/useBookSelectionPermissions.ts b/client/src/features/book/composables/useBookSelectionPermissions.ts
new file mode 100644
index 000000000..80cefbf7b
--- /dev/null
+++ b/client/src/features/book/composables/useBookSelectionPermissions.ts
@@ -0,0 +1,40 @@
+import { computed, shallowRef, watch, type Ref } from 'vue'
+import { Permission, type BookCard } from '@bookorbit/types'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
+import { useLibraries } from '@/features/library/composables/useLibraries'
+import type { QuerySelectionState } from './useBookBulkActions'
+
+export function useBookSelectionPermissions(books: Ref<BookCard[]>, selectedIds: Ref<Set<number>>, querySelection?: Ref<QuerySelectionState | null>) {
+  const { hasLibraryPermission } = useLibraryPermissions()
+  const { libraries } = useLibraries()
+  const selectedLibraries = shallowRef(new Map<number, number | undefined>())
+  watch(
+    () => ({
+      ids: [...selectedIds.value],
+      loaded: books.value.filter((book) => selectedIds.value.has(book.id)).map((book) => ({ id: book.id, libraryId: book.libraryId })),
+    }),
+    ({ ids, loaded }) => {
+      const next = new Map<number, number | undefined>()
+      for (const id of ids) {
+        if (selectedLibraries.value.has(id)) next.set(id, selectedLibraries.value.get(id))
+      }
+      for (const book of loaded) next.set(book.id, book.libraryId)
+      selectedLibraries.value = next
+    },
+    { immediate: true, flush: 'sync' },
+  )
+  const canEditSelectionMetadata = computed(() => {
+    const query = querySelection?.value
+    if (query) {
+      if (query.libraryId != null) return hasLibraryPermission(Permission.LibraryEditMetadata, query.libraryId, 'editor')
+      const bookLibraries = libraries.value.filter((library) => library.type === 'books')
+      return bookLibraries.length > 0 && bookLibraries.every((library) => hasLibraryPermission(Permission.LibraryEditMetadata, library.id, 'editor'))
+    }
+    if (selectedIds.value.size === 0) return false
+    return [...selectedIds.value].every(
+      (id) => selectedLibraries.value.has(id) && hasLibraryPermission(Permission.LibraryEditMetadata, selectedLibraries.value.get(id), 'editor'),
+    )
+  })
+
+  return { canEditSelectionMetadata }
+}
diff --git a/client/src/features/book/composables/useBookTableShell.ts b/client/src/features/book/composables/useBookTableShell.ts
index 8e9ef3d79..793a1c510 100644
--- a/client/src/features/book/composables/useBookTableShell.ts
+++ b/client/src/features/book/composables/useBookTableShell.ts
@@ -4,6 +4,7 @@ import { useRouter } from 'vue-router'
 import type { BookCard } from '@bookorbit/types'
 import { useTableViewControls } from './useTableViewControls'
 import { useBookViewSelection } from './useBookViewSelection'
+import { useBookSelectionPermissions } from './useBookSelectionPermissions'
 import { useBookNavigation } from './useBookNavigation'
 import { useDeleteBook } from './useDeleteBook'
 import { useBookBulkActions, type QuerySelectionState } from './useBookBulkActions'
@@ -27,6 +28,7 @@ export function useBookTableShell({ books, selectionMode, querySelection, onMove
   const { setBookContext } = useBookNavigation()
   const tableControls = useTableViewControls()
   const selection = useBookViewSelection(books, selectionMode)
+  const { canEditSelectionMetadata } = useBookSelectionPermissions(books, selection.selectedIds, querySelection)
 
   const {
     pendingId: deleteBookId,
@@ -100,6 +102,7 @@ export function useBookTableShell({ books, selectionMode, querySelection, onMove
   return {
     ...tableControls,
     ...selection,
+    canEditSelectionMetadata,
     deleteBookId,
     deletingBook,
     promptDelete,
diff --git a/client/src/features/book/composables/useTableCellHelpers.ts b/client/src/features/book/composables/useTableCellHelpers.ts
index 035d1d174..c8d63474a 100644
--- a/client/src/features/book/composables/useTableCellHelpers.ts
+++ b/client/src/features/book/composables/useTableCellHelpers.ts
@@ -3,10 +3,13 @@ import { isAudioFormat } from '@bookorbit/types'
 import { COLUMN_DEF_MAP, isCustomColumnId, parseCustomFieldId, type ColumnDef } from './tableColumnSchema'
 import type { useTableLocks } from './useTableLocks'
 
+const PERSONAL_STATE_COLUMN_IDS = new Set(['readStatus'])
+
 export function useTableCellHelpers(
   locks: ReturnType<typeof useTableLocks>,
   isReadOnly: () => boolean,
   columnMapGetter?: () => Map<string, ColumnDef>,
+  canEditBookMetadata?: (book: BookCard) => boolean,
 ) {
   function getCellValue(book: BookCard, colId: string): unknown {
     const map = columnMapGetter ? columnMapGetter() : (COLUMN_DEF_MAP as Map<string, ColumnDef>)
@@ -26,6 +29,7 @@ export function useTableCellHelpers(
 
   function isCellReadOnly(book: BookCard, col: { id: string; isEditable: boolean }): boolean {
     if (!col.isEditable) return true
+    if (canEditBookMetadata && !PERSONAL_STATE_COLUMN_IDS.has(col.id) && !canEditBookMetadata(book)) return true
     if (col.id === 'narrators' && !isBookAudio(book)) return true
     if (isCellLocked(book, col.id)) return true
     // Custom fields: block editing when the book has no entry for this field.
diff --git a/client/src/features/book/lib/book-card-mapper.ts b/client/src/features/book/lib/book-card-mapper.ts
index 8e98c3111..2b1d67041 100644
--- a/client/src/features/book/lib/book-card-mapper.ts
+++ b/client/src/features/book/lib/book-card-mapper.ts
@@ -14,6 +14,7 @@ function toBookFileRef(file: BookDetail['files'][number]): BookFileRef {
 export function mergeBookCardWithDetail(book: BookCard, detail: BookDetail): BookCard {
   return {
     ...book,
+    libraryId: detail.libraryId,
     status: detail.status,
     title: detail.title,
     subtitle: detail.subtitle,
diff --git a/client/src/features/library/components/LibraryCreatorAccess.vue b/client/src/features/library/components/LibraryCreatorAccess.vue
index 81bd5ac69..5d1ad3c10 100644
--- a/client/src/features/library/components/LibraryCreatorAccess.vue
+++ b/client/src/features/library/components/LibraryCreatorAccess.vue
@@ -208,5 +208,6 @@ onMounted(() => {
       <ShieldCheck :size="13" class="shrink-0" aria-hidden="true" />
       {{ t('library.creator.access.superusers') }}
     </p>
+    <p class="text-xs text-muted-foreground">{{ t('library.creator.access.levelsHint') }}</p>
   </div>
 </template>
diff --git a/client/src/features/library/composables/__tests__/useLibraryPermissions.spec.ts b/client/src/features/library/composables/__tests__/useLibraryPermissions.spec.ts
new file mode 100644
index 000000000..b43ae599e
--- /dev/null
+++ b/client/src/features/library/composables/__tests__/useLibraryPermissions.spec.ts
@@ -0,0 +1,96 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { ref } from 'vue'
+import { Permission, type AccessLevel, type Library } from '@bookorbit/types'
+
+const state = vi.hoisted(() => ({ superuser: false, permission: true }))
+const libraries = ref<Library[]>([])
+vi.mock('@/features/auth/composables/usePermissions', () => ({
+  usePermissions: () => ({
+    hasPermission: () => state.superuser || state.permission,
+    isSuperuser: {
+      get value() {
+        return state.superuser
+      },
+    },
+  }),
+}))
+vi.mock('../useLibraries', () => ({ useLibraries: () => ({ libraries }) }))
+const { useLibraryPermissions } = await import('../useLibraryPermissions')
+
+function library(id: number, accessLevel?: AccessLevel | null, type: Library['type'] = 'books'): Library {
+  return { id, type, accessLevel } as Library
+}
+
+beforeEach(() => {
+  state.superuser = false
+  state.permission = true
+  libraries.value = [library(1, 'editor'), library(2, 'viewer'), library(3, 'owner')]
+})
+
+describe('useLibraryPermissions', () => {
+  it.each([
+    [1, true],
+    [2, false],
+    [3, true],
+    [4, false],
+    [undefined, false],
+    [null, false],
+  ] as const)('checks editor access for library %s', (id, expected) => {
+    expect(useLibraryPermissions().hasLibraryPermission(Permission.LibraryEditMetadata, id, 'editor')).toBe(expected)
+  })
+
+  it('requires the global permission even for editors and owners', () => {
+    state.permission = false
+    const { hasLibraryPermission } = useLibraryPermissions()
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 1, 'editor')).toBe(false)
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 3, 'editor')).toBe(false)
+  })
+
+  it('fails closed while libraries are loading or have no role', () => {
+    const { hasLibraryPermission } = useLibraryPermissions()
+    libraries.value = []
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 1, 'editor')).toBe(false)
+    libraries.value = [library(1), library(2, null)]
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 1, 'editor')).toBe(false)
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 2, 'editor')).toBe(false)
+  })
+
+  it('permits superusers without explicit permissions or membership', () => {
+    state.superuser = true
+    state.permission = false
+    libraries.value = []
+    expect(useLibraryPermissions().hasLibraryPermission(Permission.LibraryEditMetadata, 7, 'editor')).toBe(true)
+  })
+
+  it('rechecks a changed role and clears permissions on library reset', () => {
+    const { hasLibraryPermission } = useLibraryPermissions()
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 1, 'editor')).toBe(true)
+    libraries.value[0]!.accessLevel = 'viewer'
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 1, 'editor')).toBe(false)
+    libraries.value = []
+    expect(hasLibraryPermission(Permission.LibraryEditMetadata, 3, 'editor')).toBe(false)
+  })
+
+  it('preserves viewer-level access and requires owner for owner-level actions', () => {
+    const { hasLibraryPermission } = useLibraryPermissions()
+    expect(hasLibraryPermission(Permission.LibraryDownload, 2)).toBe(true)
+    expect(hasLibraryPermission(Permission.ManageLibraries, 1, 'owner')).toBe(false)
+    expect(hasLibraryPermission(Permission.ManageLibraries, 3, 'owner')).toBe(true)
+  })
+
+  it('reports whether any book library grants the permission at the required level', () => {
+    const { hasPermissionInAnyLibrary } = useLibraryPermissions()
+    expect(hasPermissionInAnyLibrary(Permission.LibraryEditMetadata, 'editor')).toBe(true)
+
+    libraries.value = [library(1, 'viewer'), library(2, 'editor', 'podcasts')]
+    expect(hasPermissionInAnyLibrary(Permission.LibraryEditMetadata, 'editor')).toBe(false)
+
+    state.superuser = true
+    expect(hasPermissionInAnyLibrary(Permission.LibraryEditMetadata, 'editor')).toBe(true)
+
+    state.superuser = false
+    state.permission = false
+    libraries.value = [library(1, 'owner')]
+    expect(hasPermissionInAnyLibrary(Permission.LibraryEditMetadata, 'editor')).toBe(false)
+  })
+})
diff --git a/client/src/features/library/composables/useLibraryPermissions.ts b/client/src/features/library/composables/useLibraryPermissions.ts
new file mode 100644
index 000000000..dc76875ec
--- /dev/null
+++ b/client/src/features/library/composables/useLibraryPermissions.ts
@@ -0,0 +1,29 @@
+import { computed, type ComputedRef } from 'vue'
+import type { AccessLevel } from '@bookorbit/types'
+import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraries } from './useLibraries'
+
+let libraryAccess: ComputedRef<Map<number, AccessLevel | null | undefined>> | undefined
+const accessRank: Record<AccessLevel, number> = { viewer: 1, editor: 2, owner: 3 }
+
+export function useLibraryPermissions() {
+  const { hasPermission, isSuperuser } = usePermissions()
+  const { libraries } = useLibraries()
+  const access = (libraryAccess ??= computed(() => new Map(libraries.value.map((library) => [library.id, library.accessLevel]))))
+
+  function hasLibraryPermission(permission: string, libraryId: number | null | undefined, required: AccessLevel = 'viewer'): boolean {
+    if (!hasPermission(permission)) return false
+    if (isSuperuser.value) return true
+    if (libraryId == null) return false
+    const level = access.value.get(libraryId)
+    return level != null && accessRank[level] >= accessRank[required]
+  }
+
+  function hasPermissionInAnyLibrary(permission: string, required: AccessLevel = 'viewer'): boolean {
+    if (!hasPermission(permission)) return false
+    if (isSuperuser.value) return true
+    return libraries.value.some((library) => library.type === 'books' && hasLibraryPermission(permission, library.id, required))
+  }
+
+  return { hasLibraryPermission, hasPermissionInAnyLibrary }
+}
diff --git a/client/src/features/series/views/SeriesDetailView.spec.ts b/client/src/features/series/views/SeriesDetailView.spec.ts
index cd8c524a4..aa4f26eeb 100644
--- a/client/src/features/series/views/SeriesDetailView.spec.ts
+++ b/client/src/features/series/views/SeriesDetailView.spec.ts
@@ -31,6 +31,7 @@ const mocks = vi.hoisted(() => ({
   libraryId: null as unknown as { value: number | null },
   fetchSeriesBooks: vi.fn<(...args: unknown[]) => Promise<unknown>>(),
   api: vi.fn<(...args: unknown[]) => Promise<unknown>>(),
+  readOnlyLibraryIds: new Set<number>(),
 }))
 
 vi.mock('vue-router', async (importOriginal) => {
@@ -46,6 +47,14 @@ vi.mock('@/features/auth/composables/usePermissions', () => ({
   usePermissions: () => ({ hasPermission: () => true }),
 }))
 
+vi.mock('@/features/library/composables/useLibraryPermissions', () => ({
+  useLibraryPermissions: () => ({
+    hasLibraryPermission: (_permission: string, libraryId: number | null | undefined) =>
+      libraryId == null || !mocks.readOnlyLibraryIds.has(libraryId),
+    hasPermissionInAnyLibrary: () => true,
+  }),
+}))
+
 vi.mock('@/features/book/composables/useBookNavigation', () => ({
   useBookNavigation: () => ({ setBookContext: mocks.setBookContext }),
 }))
@@ -274,6 +283,7 @@ describe('SeriesDetailView', () => {
     mocks.order = ref('asc')
     mocks.libraryId = ref<number | null>(null)
 
+    mocks.readOnlyLibraryIds.clear()
     mocks.routerPush.mockReset()
     mocks.routerPush.mockResolvedValue(undefined)
     mocks.fetchLibraries.mockReset()
@@ -577,4 +587,22 @@ describe('SeriesDetailView', () => {
     expect(mocks.loadBooks).not.toHaveBeenCalled()
     expect(mocks.setBookContext).not.toHaveBeenCalled()
   })
+
+  it('opens the series editor on the books the user can edit, skipping read-only libraries', async () => {
+    mocks.readOnlyLibraryIds.add(1)
+    mocks.items.value = [makeBook({ id: 101, libraryId: 1 }), makeBook({ id: 102, libraryId: 2 })]
+    mocks.total.value = 2
+    mocks.hasMore.value = false
+
+    const wrapper = mountView()
+    await nextTick()
+    mocks.setBookContext.mockClear()
+
+    const editBtn = wrapper.findAll('button').find((b) => b.text().includes('Edit Metadata'))
+    await editBtn!.trigger('click')
+    await flushPromises()
+
+    expect(mocks.setBookContext).toHaveBeenCalledWith([102], 1)
+    expect(mocks.routerPush).toHaveBeenCalledWith({ name: 'book-detail', params: { bookId: 102 }, query: { tab: 'edit' } })
+  })
 })
diff --git a/client/src/features/series/views/SeriesDetailView.vue b/client/src/features/series/views/SeriesDetailView.vue
index 154896119..ff47f65d3 100644
--- a/client/src/features/series/views/SeriesDetailView.vue
+++ b/client/src/features/series/views/SeriesDetailView.vue
@@ -13,9 +13,9 @@ import { bookCoverStyle } from '@/features/book/lib/book-cover'
 import { useCoverVersions } from '@/features/book/composables/useCoverVersions'
 import { useScrollRestoreOnActivate } from '@/features/book/composables/useScrollRestoreOnActivate'
 import { useDisplaySettings } from '@/composables/useDisplaySettings'
-import { usePermissions } from '@/features/auth/composables/usePermissions'
 import { useBookNavigation } from '@/features/book/composables/useBookNavigation'
 import { useLibraries } from '@/features/library/composables/useLibraries'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { usePageTitle } from '@/composables/usePageTitle'
 import { useSafeHtml } from '@/features/book/composables/useSafeHtml'
 import ToggleSwitch from '@/components/ui/ToggleSwitch.vue'
@@ -48,7 +48,6 @@ const route = useRoute()
 const router = useRouter()
 const mainRef = ref<HTMLElement | null>(null)
 useScrollRestoreOnActivate(mainRef)
-const { hasPermission } = usePermissions()
 const { setBookContext } = useBookNavigation()
 const { coverUrl } = useCoverVersions()
 
@@ -103,7 +102,11 @@ const leadBook = ref<{
 let observer: IntersectionObserver | null = null
 let leadBookRequestToken = 0
 
-const canEditMetadata = computed(() => hasPermission('library_edit_metadata'))
+const { hasLibraryPermission, hasPermissionInAnyLibrary } = useLibraryPermissions()
+function canEditBookMetadata(book: BookCard): boolean {
+  return hasLibraryPermission('library_edit_metadata', book.libraryId, 'editor')
+}
+const canEditMetadata = computed(() => hasPermissionInAnyLibrary('library_edit_metadata', 'editor'))
 const safeLeadDescription = useSafeHtml(() => leadBook.value?.description)
 const visibleSeriesAuthors = computed(() => (seriesInfo.value?.authors ?? []).slice(0, 5))
 const hiddenSeriesAuthorsCount = computed(() => Math.max(0, (seriesInfo.value?.authors.length ?? 0) - visibleSeriesAuthors.value.length))
@@ -378,7 +381,7 @@ async function editSeriesMetadata() {
       return
     }
 
-    const ids = books.value.map((book) => book.id)
+    const ids = books.value.filter(canEditBookMetadata).map((book) => book.id)
     if (ids.length === 0) {
       toast.error(t('series.detail.noBooksToEdit'))
       return
diff --git a/client/src/locales/en.json b/client/src/locales/en.json
index db8579887..a7a1ea5a5 100644
--- a/client/src/locales/en.json
+++ b/client/src/locales/en.json
@@ -9799,6 +9799,7 @@
         "add": "Add",
         "emptyCreate": "Nobody else yet. People you add here get access as soon as the library exists.",
         "superusers": "Superusers always have full access.",
+        "levelsHint": "Viewers can browse and read. Editors and owners can also edit metadata when their account has the Edit metadata permission.",
         "levelFor": "Access level for {name}",
         "revokeFor": "Remove access for {name}",
         "revokeQuestion": "Remove access?",
diff --git a/client/src/views/BookDetailView.vue b/client/src/views/BookDetailView.vue
index 255bac084..32c2ba83b 100644
--- a/client/src/views/BookDetailView.vue
+++ b/client/src/views/BookDetailView.vue
@@ -12,7 +12,7 @@ import { useBookEvents } from '@/features/book/composables/useBookEvents'
 import { useScanProgress } from '@/features/scanner/composables/useScanProgress'
 import { usePageTitle } from '@/composables/usePageTitle'
 import { normalizeBookDetailTab } from '@/features/book/lib/book-detail-tabs'
-import { usePermissions } from '@/features/auth/composables/usePermissions'
+import { useLibraryPermissions } from '@/features/library/composables/useLibraryPermissions'
 import { useLibraries } from '@/features/library/composables/useLibraries'
 import { COVER_ASPECT_RATIO_KEY, DEFAULT_COVER_ASPECT_RATIO } from '@/features/book/lib/cover-aspect-ratio'
 import { useCoverVersions } from '@/features/book/composables/useCoverVersions'
@@ -29,7 +29,7 @@ const KEPT_ALIVE_TABS = ['ReadingLogTab', 'HighlightsTab']
 
 const { t } = useI18n()
 const route = useRoute()
-const { hasPermission } = usePermissions()
+const { hasLibraryPermission } = useLibraryPermissions()
 const { libraries } = useLibraries()
 
 provide(
@@ -43,9 +43,13 @@ provide(
 )
 
 const bookId = computed(() => Number(route.params.bookId))
-const tab = computed(() => normalizeBookDetailTab(route.query.tab))
+const tab = computed(() => {
+  const requested = normalizeBookDetailTab(route.query.tab)
+  return requested === 'edit' && detail.value && !canEditMetadata.value ? 'details' : requested
+})
 
 const { detail, loading, notFound, fetch } = useBookDetail()
+const canEditMetadata = computed(() => hasLibraryPermission('library_edit_metadata', detail.value?.libraryId, 'editor'))
 const pageTitle = computed(() => {
   const title = detail.value?.title?.trim()
   const base = title || (Number.isFinite(bookId.value) ? t('views.bookDetail.titleWithId', { id: bookId.value }) : t('views.bookDetail.title'))
@@ -138,7 +142,7 @@ function onCoverChanged() {
 </script>
 
 <template>
-  <BookDetailLayout :book-id="bookId" :cover-tint="coverTint">
+  <BookDetailLayout :book-id="bookId" :cover-tint="coverTint" :can-edit-metadata="canEditMetadata">
     <Transition name="content" mode="out-in">
       <div v-if="detail" key="detail" class="@container/book-detail h-full">
         <!--
@@ -149,7 +153,7 @@ function onCoverChanged() {
         <KeepAlive :include="KEPT_ALIVE_TABS">
           <DetailsTab v-if="tab === 'details'" :book="detail" @saved="onMetadataSaved" @moved="handleMovedToLibrary" />
           <EditMetadataTab
-            v-else-if="tab === 'edit' && hasPermission('library_edit_metadata')"
+            v-else-if="tab === 'edit' && canEditMetadata"
             :book="detail"
             @saved="onMetadataSaved"
             @locks-changed="onLocksChanged"
diff --git a/client/src/views/CollectionView.vue b/client/src/views/CollectionView.vue
index 763c41702..6d293b228 100644
--- a/client/src/views/CollectionView.vue
+++ b/client/src/views/CollectionView.vue
@@ -218,6 +218,7 @@ const {
   handleImportPresetBackup,
   selectedIds,
   selectedCount,
+  canEditSelectionMetadata,
   enterSelectionMode,
   exitSelectionMode,
   selectAll,
@@ -424,6 +425,7 @@ defineOptions({ name: 'CollectionView' })
     />
 
     <SelectionActionBar
+      :metadata-editable="canEditSelectionMetadata"
       :visible="selectionMode"
       :count="selectedCount"
       :in-collection="isCollectionOwner"
diff --git a/client/src/views/HomeView.vue b/client/src/views/HomeView.vue
index e70684d95..148838334 100644
--- a/client/src/views/HomeView.vue
+++ b/client/src/views/HomeView.vue
@@ -396,6 +396,7 @@ const {
   handleImportPresetBackup,
   selectedIds,
   selectedCount,
+  canEditSelectionMetadata,
   enterSelectionMode,
   exitSelectionMode,
   selectAll,
@@ -1058,6 +1059,7 @@ defineOptions({ name: 'HomeView' })
     </Transition>
 
     <SelectionActionBar
+      :metadata-editable="canEditSelectionMetadata"
       :visible="selectionMode"
       :count="querySelection ? querySelection.total : selectedCount"
       :in-flight="inFlight"
diff --git a/client/src/views/SmartScopeView.vue b/client/src/views/SmartScopeView.vue
index ee49860c5..8e411cdb9 100644
--- a/client/src/views/SmartScopeView.vue
+++ b/client/src/views/SmartScopeView.vue
@@ -224,6 +224,7 @@ const {
   handleImportPresetBackup,
   selectedIds,
   selectedCount,
+  canEditSelectionMetadata,
   enterSelectionMode,
   exitSelectionMode,
   selectAll,
@@ -475,6 +476,7 @@ defineOptions({ name: 'SmartScopeView' })
     />
 
     <SelectionActionBar
+      :metadata-editable="canEditSelectionMetadata"
       :visible="selectionMode"
       :count="selectedCount"
       :in-flight="inFlight"
diff --git a/client/src/views/__tests__/BookDetailView.spec.ts b/client/src/views/__tests__/BookDetailView.spec.ts
index 734844ac0..2eff86b59 100644
--- a/client/src/views/__tests__/BookDetailView.spec.ts
+++ b/client/src/views/__tests__/BookDetailView.spec.ts
@@ -9,6 +9,7 @@ const mockState = vi.hoisted(() => ({
   detail: null as unknown as { value: BookDetail | null },
   loading: null as unknown as { value: boolean },
   notFound: null as unknown as { value: boolean },
+  libraries: null as unknown as { value: { id: number; accessLevel: string }[] },
   fetch: vi.fn<(bookId: number) => void>(),
   progressChangedCallback: null as ((event: BookProgressChangedEvent) => void) | null,
 }))
@@ -52,12 +53,15 @@ vi.mock('@/composables/usePageTitle', () => ({
 }))
 
 vi.mock('@/features/auth/composables/usePermissions', () => ({
-  usePermissions: () => ({ hasPermission: () => true }),
+  usePermissions: () => ({ hasPermission: () => true, isSuperuser: { value: false } }),
 }))
 
-vi.mock('@/features/library/composables/useLibraries', () => ({
-  useLibraries: () => ({ libraries: ref([]) }),
-}))
+vi.mock('@/features/library/composables/useLibraries', async () => {
+  const { ref } = await import('vue')
+  const libraries = ref([{ id: 1, accessLevel: 'editor' }])
+  mockState.libraries = libraries
+  return { useLibraries: () => ({ libraries }) }
+})
 
 function makeBook(overrides: Partial<BookDetail> = {}): BookDetail {
   return {
@@ -158,6 +162,7 @@ describe('BookDetailView', () => {
       params: { bookId: '217' },
       query: { tab: 'details' },
     })
+    mockState.libraries.value = [{ id: 1, accessLevel: 'editor' }]
     mockState.detail = ref(makeBook())
     mockState.loading = ref(false)
     mockState.notFound = ref(false)
@@ -165,6 +170,30 @@ describe('BookDetailView', () => {
     mockState.progressChangedCallback = null
   })
 
+  it('hides the editor for a viewer even when the URL explicitly selects edit', async () => {
+    mockState.libraries.value = [{ id: 1, accessLevel: 'viewer' }]
+    mockState.route.query = { tab: 'edit' }
+    const wrapper = mount(BookDetailView, {
+      global: {
+        stubs: {
+          BookDetailLayout: { name: 'BookDetailLayout', props: ['canEditMetadata'], template: '<div><slot /></div>' },
+          DetailsTab: DetailsTabStub,
+          EditMetadataTab: EditMetadataTabStub,
+          FilesTab: true,
+        },
+      },
+    })
+    expect(wrapper.find('[data-test="edit-rating"]').exists()).toBe(false)
+    expect(wrapper.find('[data-test="details-rating"]').exists()).toBe(true)
+    expect(wrapper.findComponent({ name: 'BookDetailLayout' }).props('canEditMetadata')).toBe(false)
+    mockState.libraries.value[0]!.accessLevel = 'owner'
+    await nextTick()
+    expect(wrapper.find('[data-test="edit-rating"]').exists()).toBe(true)
+    mockState.libraries.value = []
+    await nextTick()
+    expect(wrapper.find('[data-test="edit-rating"]').exists()).toBe(false)
+  })
+
   it('keeps updated rating when switching details -> edit -> details tabs', async () => {
     const wrapper = mount(BookDetailView, {
       global: {
diff --git a/packages/types/src/book.ts b/packages/types/src/book.ts
index 6b0a83a1f..e9984e27e 100644
--- a/packages/types/src/book.ts
+++ b/packages/types/src/book.ts
@@ -186,6 +186,7 @@ export type BookSeriesMembership = {
 
 export type BookCard = {
   id: number;
+  libraryId?: number;
   status: string;
   /** The frame of the cover the book shows by default, which follows its primary file's medium rather than its library. */
   coverAspectRatio: CoverAspectRatio;
diff --git a/server/src/modules/authors/authors.service.test.ts b/server/src/modules/authors/authors.service.test.ts
index 4c6545e92..a607be340 100644
--- a/server/src/modules/authors/authors.service.test.ts
+++ b/server/src/modules/authors/authors.service.test.ts
@@ -65,6 +65,7 @@ describe('AuthorsService', () => {
   const libraryService = {
     findAll: vi.fn(),
     findAccessibleLibraryIds: vi.fn(),
+    findEditableLibraryIds: vi.fn(),
   };
 
   const authorMetadataFetchService = {
@@ -119,6 +120,7 @@ describe('AuthorsService', () => {
     );
     libraryService.findAll.mockResolvedValue([{ id: 1 }, { id: 2 }]);
     libraryService.findAccessibleLibraryIds.mockResolvedValue([1, 2]);
+    libraryService.findEditableLibraryIds.mockResolvedValue([1, 2]);
     authorImageStorage.getThumbnailUrlIfExists.mockResolvedValue(null);
     authorImageStorage.getImageUrlIfExists.mockResolvedValue(null);
     enrichmentOrchestrator.schedule.mockResolvedValue(1);
@@ -198,6 +200,15 @@ describe('AuthorsService', () => {
     expect(result.affectedBookCount).toBe(8);
   });
 
+  it('update rejects authors whose books sit in a library the user can only read', async () => {
+    authorsRepo.findVisibleAuthorIds.mockResolvedValue([20]);
+    authorsRepo.findRelatedLibraryIds.mockResolvedValue([1, 2]);
+    libraryService.findEditableLibraryIds.mockResolvedValue([1]);
+
+    await expect(service.update(reqUser(), 20, { name: 'Renamed' })).rejects.toBeInstanceOf(ForbiddenException);
+    expect(authorsRepo.updateAuthorById).not.toHaveBeenCalled();
+  });
+
   it('update normalizes author names and blank optional fields', async () => {
     authorsRepo.findVisibleAuthorIds.mockResolvedValue([20]);
     authorsRepo.findRelatedLibraryIds.mockResolvedValue([1]);
diff --git a/server/src/modules/authors/authors.service.ts b/server/src/modules/authors/authors.service.ts
index 76f34feb9..b3696d171 100644
--- a/server/src/modules/authors/authors.service.ts
+++ b/server/src/modules/authors/authors.service.ts
@@ -649,7 +649,7 @@ export class AuthorsService {
   }
 
   private async assertMutationAccess(user: RequestUser, authorIds: number[]) {
-    const libraryIds = await this.resolveLibraryIds(user);
+    const [libraryIds, editableLibraryIds] = await Promise.all([this.resolveLibraryIds(user), this.libraryService.findEditableLibraryIds(user)]);
     const [visible, relatedLibraryIds] = await Promise.all([
       this.authorsRepo.findVisibleAuthorIds(authorIds, libraryIds),
       this.authorsRepo.findRelatedLibraryIds(authorIds),
@@ -657,8 +657,8 @@ export class AuthorsService {
     if (visible.length !== authorIds.length) {
       throw new NotFoundException('Author not found');
     }
-    const accessibleSet = new Set(libraryIds);
-    if (relatedLibraryIds.some((libraryId) => !accessibleSet.has(libraryId))) {
+    const editableSet = new Set(editableLibraryIds);
+    if (relatedLibraryIds.some((libraryId) => !editableSet.has(libraryId))) {
       throw new ForbiddenException('Insufficient library access to mutate one or more selected authors');
     }
   }
diff --git a/server/src/modules/book/book-metadata-access.test.ts b/server/src/modules/book/book-metadata-access.test.ts
new file mode 100644
index 000000000..980717a7f
--- /dev/null
+++ b/server/src/modules/book/book-metadata-access.test.ts
@@ -0,0 +1,310 @@
+import { ForbiddenException, NotFoundException } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { Test } from '@nestjs/testing';
+import { tmpdir } from 'os';
+import { EMPTY_CONTENT_FILTER_RULES, Permission, type AccessLevel } from '@bookorbit/types';
+import type { RequestUser } from '../../common/types/request-user';
+import { LibraryRepository } from '../library/library.repository';
+import { LibraryService } from '../library/library.service';
+import { MetadataService } from '../metadata/metadata.service';
+import { MetadataFetchPipeline } from '../metadata-fetch/metadata-fetch-pipeline';
+import { BookMetadataLockService } from '../book-metadata-lock/book-metadata-lock.service';
+import { BookCoverStore } from '../book-cover-store/book-cover-store.service';
+import { FileWriteService } from '../file-write/file-write.service';
+import { FileRenameService } from '../file-write/file-rename.service';
+import { CoverService } from '../cover/cover.service';
+import { BulkEditFieldsDto } from './dto/bulk-edit-metadata.dto';
+import { BookRepository } from './book.repository';
+import { BookReadService } from './book-read.service';
+import { BookService } from './book.service';
+import { BookEmbedderService } from '../embedding/book-embedder.service';
+import { MetadataScoreService } from '../metadata-score/metadata-score.service';
+import { AchievementEventsService } from '../achievement/achievement-events.service';
+import { AudiobookEbookProgressSyncService } from './audiobook-ebook-progress-sync.service';
+import { UserBookStatusService } from '../user-book-status/user-book-status.service';
+
+const user: RequestUser = {
+  id: 11,
+  username: 'metadata-editor',
+  name: 'Metadata Editor',
+  email: null,
+  active: true,
+  isSuperuser: false,
+  isDefaultPassword: false,
+  tokenVersion: 1,
+  settings: {},
+  avatarUrl: null,
+  provisioningMethod: 'local',
+  permissions: [Permission.LibraryEditMetadata],
+  contentFilters: EMPTY_CONTENT_FILTER_RULES,
+};
+
+type Context = Awaited<ReturnType<typeof createContext>>;
+
+async function createContext(role: AccessLevel | null = 'viewer') {
+  const roles = new Map<number, AccessLevel | null>([
+    [7, role],
+    [8, 'editor'],
+    [9, 'owner'],
+  ]);
+  const bookLibraries = new Map([
+    [1, 7],
+    [2, 8],
+    [3, 9],
+  ]);
+  const libraryRepo = {
+    hasUserAccess: vi.fn((_userId: number, libraryId: number) => Boolean(roles.get(libraryId))),
+    findUserAccessLevel: vi.fn((_userId: number, libraryId: number) => roles.get(libraryId) ?? null),
+  };
+  const bookRepo = {
+    findLibraryIdByBookId: vi.fn((id: number) => bookLibraries.get(id) ?? null),
+    findLibraryIdsByBookIds: vi.fn((ids: number[]) =>
+      ids.filter((id) => bookLibraries.has(id)).map((id) => ({ id, libraryId: bookLibraries.get(id)! })),
+    ),
+    findById: vi.fn((id: number) => {
+      const libraryId = bookLibraries.get(id);
+      return libraryId === undefined
+        ? null
+        : {
+            book: { books: { id, libraryId }, book_metadata: {} },
+            authorRows: [],
+            genreRows: [],
+            communityRatingRows: [],
+            fileRows: [],
+            narratorRows: [],
+          };
+    }),
+    checkBookPassesContentFilters: vi.fn().mockResolvedValue(true),
+    withTransaction: vi.fn(async (callback: (tx: unknown) => Promise<unknown>) => callback({})),
+    updateMetadataFields: vi.fn(),
+    updateAddedAt: vi.fn(),
+    bulkUpdateMetadataFields: vi.fn(),
+    bulkSetRating: vi.fn(),
+    findCoverSourceFilesByBookIds: vi.fn().mockResolvedValue([]),
+    findProgress: vi.fn().mockResolvedValue(null),
+    upsertProgress: vi.fn(),
+    findFileById: vi.fn().mockResolvedValue({ id: 10, bookId: 1, libraryId: 7 }),
+    findProgressByBook: vi.fn().mockResolvedValue(0),
+  };
+  const metadata = { replaceAuthors: vi.fn(), replaceTags: vi.fn(), replaceGenres: vi.fn(), downloadAndSaveCover: vi.fn() };
+  const locks = {
+    assertManualUpdateAllowed: vi.fn(),
+    assertFieldsUnlocked: vi.fn(),
+    replaceLockedFields: vi.fn().mockResolvedValue([]),
+    bulkReplaceLockedFields: vi.fn(),
+    getBookIdsWithLockedField: vi.fn().mockResolvedValue(new Set()),
+    getLockedFieldsMap: vi.fn().mockResolvedValue(new Map()),
+  };
+  const pipeline = { run: vi.fn(), runWithSources: vi.fn() };
+  const coverStore = { saveCustom: vi.fn(), revert: vi.fn(), chooseWriteMedium: vi.fn().mockResolvedValue('ebook') };
+  const fileWrite = {
+    scheduleWrite: vi.fn(),
+    writeToFile: vi.fn(),
+    cancelPendingWrite: vi.fn(),
+    findLibraryWriteSettingsForBook: vi.fn().mockResolvedValue({ fileWriteEnabled: false, fileRenameEnabled: false }),
+  };
+  const fileRename = { scheduleRename: vi.fn(), cancelPendingRename: vi.fn(), performRename: vi.fn() };
+  const score = { calculateAndSave: vi.fn(), calculateAndSaveMany: vi.fn() };
+  const mocks = new Map<unknown, unknown>([
+    [BookEmbedderService, { embedBook: vi.fn().mockResolvedValue(undefined) }],
+    [MetadataScoreService, score],
+    [AchievementEventsService, { emit: vi.fn() }],
+    [AudiobookEbookProgressSyncService, { syncFromEbookProgress: vi.fn() }],
+    [UserBookStatusService, { autoUpdate: vi.fn(), findOne: vi.fn() }],
+    [ConfigService, { get: vi.fn().mockReturnValue(tmpdir()) }],
+    [LibraryRepository, libraryRepo],
+    [BookRepository, bookRepo],
+    [BookReadService, bookRepo],
+    [MetadataService, metadata],
+    [BookMetadataLockService, locks],
+    [MetadataFetchPipeline, pipeline],
+    [BookCoverStore, coverStore],
+    [FileWriteService, fileWrite],
+    [FileRenameService, fileRename],
+  ]);
+  const module = await Test.createTestingModule({ providers: [BookService, LibraryService, CoverService] })
+    .useMocker((token) => mocks.get(token) ?? {})
+    .compile();
+  const service = module.get(BookService);
+  vi.spyOn(service, 'getDetail').mockResolvedValue({ id: 1 } as never);
+  return {
+    module,
+    service,
+    covers: module.get(CoverService),
+    roles,
+    bookRepo,
+    libraryRepo,
+    metadata,
+    locks,
+    pipeline,
+    coverStore,
+    fileWrite,
+    fileRename,
+    score,
+  };
+}
+
+const singleWrites: { name: string; run: (ctx: Context, caller: RequestUser) => Promise<unknown> }[] = [
+  { name: 'metadata', run: ({ service }, caller) => service.updateMetadata(1, { title: 'Changed' }, caller) },
+  {
+    name: 'metadata and locks',
+    run: ({ service }, caller) => service.updateMetadataAndLocks(1, { metadata: { title: 'Changed' }, lockedFields: [] }, caller),
+  },
+  { name: 'locks only', run: ({ service }, caller) => service.updateMetadataLocks(1, [], caller) },
+  { name: 'added date', run: ({ service }, caller) => service.updateAddedAt(1, { addedAt: '2025-01-01' }, caller) },
+  { name: 'write and rename', run: ({ service }, caller) => service.writeAndRename(1, caller) },
+  { name: 'file rename', run: ({ service }, caller) => service.renameFile(10, { filename: 'renamed.epub' }, caller) },
+  { name: 'metadata refresh', run: ({ service }, caller) => service.refreshMetadata(1, false, caller) },
+  { name: 'cover regeneration', run: ({ service }, caller) => service.reExtractCover(1, caller) },
+  { name: 'cover upload', run: ({ covers }, caller) => covers.uploadCover(1, Buffer.from('image'), 'image/png', caller) },
+  { name: 'cover URL upload', run: ({ covers }, caller) => covers.uploadCoverFromUrl(1, 'https://example.com/cover.png', caller) },
+  { name: 'cover deletion', run: ({ covers }, caller) => covers.deleteCover(1, caller) },
+];
+
+const bulkWrites: { name: string; run: (ctx: Context, ids: number[]) => Promise<unknown> }[] = [
+  { name: 'set metadata', run: ({ service }, ids) => service.bulkSetMetadata(ids, 'publisher', 'Changed', user) },
+  { name: 'update tags', run: ({ service }, ids) => service.bulkUpdateTags(ids, 'replace', ['Changed'], user) },
+  { name: 'set locks', run: ({ service }, ids) => service.bulkSetMetadataLock(ids, true, user) },
+  {
+    name: 'edit metadata',
+    run: ({ service }, ids) => service.bulkEditMetadata(ids, Object.assign(new BulkEditFieldsDto(), { publisher: { value: 'Changed' } }), user),
+  },
+  { name: 'refresh metadata', run: ({ service }, ids) => service.bulkRefreshMetadata(ids, user) },
+  { name: 'regenerate covers', run: ({ service }, ids) => service.bulkReExtractCover(ids, user) },
+];
+
+function expectNoWrites(ctx: Context) {
+  for (const mock of [
+    ctx.bookRepo.withTransaction,
+    ctx.bookRepo.updateMetadataFields,
+    ctx.bookRepo.updateAddedAt,
+    ctx.bookRepo.bulkUpdateMetadataFields,
+    ctx.metadata.replaceAuthors,
+    ctx.metadata.replaceTags,
+    ctx.metadata.replaceGenres,
+    ctx.metadata.downloadAndSaveCover,
+    ctx.locks.replaceLockedFields,
+    ctx.locks.bulkReplaceLockedFields,
+    ctx.pipeline.run,
+    ctx.pipeline.runWithSources,
+    ctx.coverStore.saveCustom,
+    ctx.coverStore.revert,
+    ctx.fileWrite.scheduleWrite,
+    ctx.fileWrite.writeToFile,
+    ctx.fileWrite.cancelPendingWrite,
+    ctx.fileRename.cancelPendingRename,
+    ctx.fileRename.scheduleRename,
+    ctx.fileRename.performRename,
+  ])
+    expect(mock).not.toHaveBeenCalled();
+}
+
+describe('library roles for book metadata writes', () => {
+  const modules: Context['module'][] = [];
+  async function context(role: AccessLevel | null = 'viewer') {
+    const ctx = await createContext(role);
+    modules.push(ctx.module);
+    return ctx;
+  }
+  afterEach(async () => {
+    await Promise.all(modules.splice(0).map((module) => module.close()));
+    vi.restoreAllMocks();
+  });
+
+  it.each(singleWrites)('rejects a viewer before $name has side effects', async ({ run }) => {
+    const ctx = await context();
+    await expect(run(ctx, user)).rejects.toThrow(ForbiddenException);
+    expectNoWrites(ctx);
+  });
+
+  it.each([
+    { role: 'viewer' as const, ids: [1], rating: 4 },
+    { role: 'editor' as const, ids: [1], rating: null },
+    { role: 'owner' as const, ids: [1], rating: 5 },
+    { role: 'viewer' as const, ids: [1, 2, 3], rating: 3 },
+  ])('keeps personal ratings separate from shared metadata effects for $role and $ids', async ({ role, ids, rating }) => {
+    const ctx = await context(role);
+    await ctx.service.bulkSetRating(ids, rating, user);
+    expect(ctx.bookRepo.bulkSetRating).toHaveBeenCalledWith(ids, rating, user.id);
+    expectNoWrites(ctx);
+    expect(ctx.score.calculateAndSaveMany).not.toHaveBeenCalled();
+  });
+
+  it('rejects a personal-rating batch with an inaccessible book before persisting anything', async () => {
+    const ctx = await context(null);
+    await expect(ctx.service.bulkSetRating([2, 1], 4, user)).rejects.toThrow(ForbiddenException);
+    expect(ctx.bookRepo.bulkSetRating).not.toHaveBeenCalled();
+    expectNoWrites(ctx);
+  });
+
+  it.each(bulkWrites)('rejects a mixed editor/viewer batch before $name writes anything', async ({ run }) => {
+    const ctx = await context();
+    await expect(run(ctx, [2, 1])).rejects.toThrow(ForbiddenException);
+    expectNoWrites(ctx);
+  });
+
+  it.each(['editor', 'owner'] as const)('allows %s to persist metadata', async (role) => {
+    const ctx = await context(role);
+    await ctx.service.updateMetadata(1, { title: 'Changed' }, user);
+    expect(ctx.bookRepo.updateMetadataFields).toHaveBeenCalledWith(1, expect.objectContaining({ title: 'Changed' }), expect.anything());
+  });
+
+  it('allows a superuser without membership to persist metadata', async () => {
+    const ctx = await context(null);
+    await ctx.service.updateMetadata(1, { title: 'Changed' }, { ...user, isSuperuser: true, permissions: [] });
+    expect(ctx.bookRepo.updateMetadataFields).toHaveBeenCalled();
+    expect(ctx.libraryRepo.hasUserAccess).not.toHaveBeenCalled();
+    expect(ctx.libraryRepo.findUserAccessLevel).not.toHaveBeenCalled();
+  });
+
+  it('keeps missing membership and missing books concealed as 404', async () => {
+    const ctx = await context(null);
+    await expect(ctx.service.updateMetadata(1, { title: 'Changed' }, user)).rejects.toThrow(NotFoundException);
+    await expect(ctx.service.updateMetadata(99, { title: 'Changed' }, user)).rejects.toThrow(NotFoundException);
+    expectNoWrites(ctx);
+  });
+
+  it('conceals content-filtered books before checking editor access', async () => {
+    const ctx = await context();
+    ctx.bookRepo.checkBookPassesContentFilters.mockResolvedValue(false);
+    await expect(ctx.service.updateMetadata(1, { title: 'Changed' }, user)).rejects.toThrow(NotFoundException);
+    expect(ctx.libraryRepo.findUserAccessLevel).not.toHaveBeenCalled();
+    expectNoWrites(ctx);
+  });
+
+  it('rechecks a downgraded role for each write', async () => {
+    const ctx = await context('editor');
+    await ctx.service.updateMetadata(1, { title: 'Allowed' }, user);
+    ctx.bookRepo.updateMetadataFields.mockClear();
+    ctx.roles.set(7, 'viewer');
+    await expect(ctx.service.updateMetadataAndLocks(1, { metadata: { title: 'Denied' }, lockedFields: [] }, user)).rejects.toThrow(
+      ForbiddenException,
+    );
+    expect(ctx.bookRepo.updateMetadataFields).not.toHaveBeenCalled();
+  });
+
+  it('validates every library once for bulk locks and deduplicates book IDs', async () => {
+    const ctx = await context('editor');
+    await ctx.service.bulkSetMetadataLock([1, 2, 3, 1], true, user);
+    expect(ctx.bookRepo.findLibraryIdsByBookIds).toHaveBeenCalledWith([1, 2, 3]);
+    expect(ctx.libraryRepo.findUserAccessLevel.mock.calls).toEqual([
+      [user.id, 7],
+      [user.id, 8],
+      [user.id, 9],
+    ]);
+    expect(ctx.locks.bulkReplaceLockedFields).toHaveBeenCalled();
+  });
+
+  it.each(bulkWrites)('rejects missing IDs before bulk $name writes anything', async ({ run }) => {
+    const ctx = await context('editor');
+    await expect(run(ctx, [2, 99])).rejects.toThrow(NotFoundException);
+    expectNoWrites(ctx);
+  });
+
+  it('preserves viewer access to reading progress', async () => {
+    const ctx = await context();
+    await ctx.service.saveProgress(user.id, 10, { percentage: 25 }, user);
+    expect(ctx.bookRepo.upsertProgress).toHaveBeenCalled();
+    expect(ctx.libraryRepo.findUserAccessLevel).not.toHaveBeenCalled();
+  });
+});
diff --git a/server/src/modules/book/book.controller.test.ts b/server/src/modules/book/book.controller.test.ts
index 7ff56c9bc..af300c81b 100644
--- a/server/src/modules/book/book.controller.test.ts
+++ b/server/src/modules/book/book.controller.test.ts
@@ -1,4 +1,4 @@
-import { BadRequestException, NotFoundException } from '@nestjs/common';
+import { BadRequestException, ForbiddenException, NotFoundException } from '@nestjs/common';
 import type { MockedFunction } from 'vitest';
 import { ZipArchive } from 'archiver';
 import { createReadStream } from 'fs';
@@ -480,6 +480,21 @@ describe('BookController', () => {
     expect(raw.end).toHaveBeenCalled();
   });
 
+  it.each(['bulkRefreshMetadata', 'bulkReExtractCover'] as const)('rejects an unauthorized %s selection before starting SSE', async (method) => {
+    const { controller, bookService } = makeController();
+    const { reply, raw } = makeReply();
+    const user = makeUser();
+    const error = new ForbiddenException('Editor access required');
+    bookService.resolveSelectionToIds.mockRejectedValue(error);
+
+    await expect(controller[method]({ bookIds: [9] }, user, reply)).rejects.toBe(error);
+
+    expect(bookService.resolveSelectionToIds).toHaveBeenCalledWith({ bookIds: [9] }, user, 'editor');
+    expect(bookService[method]).not.toHaveBeenCalled();
+    expect(raw.writeHead).not.toHaveBeenCalled();
+    expect(raw.write).not.toHaveBeenCalled();
+  });
+
   it('stops sending SSE done event when client disconnects', async () => {
     const { controller, bookService } = makeController();
     const { reply, raw, emitRawEvent } = makeReply();
diff --git a/server/src/modules/book/book.controller.ts b/server/src/modules/book/book.controller.ts
index 339ca0562..b08448870 100644
--- a/server/src/modules/book/book.controller.ts
+++ b/server/src/modules/book/book.controller.ts
@@ -166,7 +166,7 @@ export class BookController {
     },
   })
   async bulkRefreshMetadata(@Body() dto: BulkRefreshMetadataDto, @CurrentUser() user: RequestUser, @Res() reply: FastifyReply) {
-    const ids = await this.bookService.resolveSelectionToIds(dto, user);
+    const ids = await this.bookService.resolveSelectionToIds(dto, user, 'editor');
     const stream = this.createSseStream(reply);
     try {
       const result = await this.bookService.bulkRefreshMetadata(
@@ -197,7 +197,7 @@ export class BookController {
     },
   })
   async bulkReExtractCover(@Body() dto: BulkBookIdsDto, @CurrentUser() user: RequestUser, @Res() reply: FastifyReply) {
-    const ids = await this.bookService.resolveSelectionToIds(dto, user);
+    const ids = await this.bookService.resolveSelectionToIds(dto, user, 'editor');
     const stream = this.createSseStream(reply);
     try {
       const result = await this.bookService.bulkReExtractCover(
diff --git a/server/src/modules/book/book.repository.ts b/server/src/modules/book/book.repository.ts
index 4c28a253a..13c3d9cf6 100644
--- a/server/src/modules/book/book.repository.ts
+++ b/server/src/modules/book/book.repository.ts
@@ -73,6 +73,7 @@ type BookRepositoryTx = Parameters<Parameters<NodePgDatabase<typeof schema>['tra
 
 type CollapsedRawRow = {
   id: number | null;
+  library_id: number;
   status: string;
   cover_aspect_ratio: string;
   primary_file_id: number | null;
@@ -554,6 +555,7 @@ export class BookRepository {
     const rows = await this.db
       .select({
         id: books.id,
+        libraryId: books.libraryId,
         status: books.status,
         coverAspectRatio: libraries.coverAspectRatio,
         primaryFileId: books.primaryFileId,
@@ -1051,6 +1053,7 @@ export class BookRepository {
       representatives AS (
         SELECT DISTINCT ON (${sql.raw(COLLAPSE_GROUP_KEY_SQL)})
           base.id,
+          base.library_id,
           base.status,
           base.cover_aspect_ratio,
           base.primary_file_id,
@@ -1131,6 +1134,7 @@ export class BookRepository {
 
     const mappedRows = rawRows.map((r) => ({
       id: r.id,
+      libraryId: r.library_id,
       status: r.status,
       coverAspectRatio: r.cover_aspect_ratio,
       primaryFileId: r.primary_file_id,
@@ -2053,6 +2057,15 @@ export class BookRepository {
     return rows.map((r) => r.id);
   }
 
+  async findDistinctLibraryIdsByWhere(where: SQL | undefined): Promise<number[]> {
+    const rows = await this.db
+      .selectDistinct({ libraryId: books.libraryId })
+      .from(books)
+      .leftJoin(bookMetadata, eq(bookMetadata.bookId, books.id))
+      .where(this.visibleWhere(where));
+    return rows.map((r) => r.libraryId);
+  }
+
   async findPrimaryFile(bookId: number): Promise<{ absolutePath: string; format: string | null } | null> {
     const [row] = await this.db
       .select({ absolutePath: bookFiles.absolutePath, format: bookFiles.format })
diff --git a/server/src/modules/book/book.service.test.ts b/server/src/modules/book/book.service.test.ts
index b32977924..7360bdef2 100644
--- a/server/src/modules/book/book.service.test.ts
+++ b/server/src/modules/book/book.service.test.ts
@@ -158,6 +158,7 @@ function makeService(overrides: { bookMetadataLockService?: unknown; appDataPath
     deleteByIdsAndInvalidateScanState: vi.fn(),
     findAllIds: vi.fn(),
     findIdsByWhere: vi.fn(),
+    findDistinctLibraryIdsByWhere: vi.fn(),
     findCardsCollapsed: vi.fn(),
     findJumpBuckets: vi.fn(),
     findJumpBucketsCollapsed: vi.fn(),
@@ -167,6 +168,7 @@ function makeService(overrides: { bookMetadataLockService?: unknown; appDataPath
   };
   const libraryService = {
     verifyUserAccess: vi.fn().mockResolvedValue(undefined),
+    verifyUserAccessLevel: vi.fn().mockResolvedValue(undefined),
     findAll: vi.fn().mockResolvedValue([]),
     findOne: vi.fn().mockResolvedValue({ readingThreshold: 1, markAsFinishedPercentComplete: 99 }),
   };
@@ -1024,7 +1026,7 @@ describe('BookService', () => {
         metadata: { title: 'New Title', isbn10: '0306406152', isbn13: '9780306406157' },
         diagnostics: makeMetadataFetchDiagnostics({ resolvedFieldCount: 3 }),
       });
-      expect(libraryService.verifyUserAccess).toHaveBeenCalledWith(user.id, 7, false);
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(user.id, 7, false, 'editor');
       expect(pipeline.runWithSources).toHaveBeenCalledWith(
         {
           title: 'Old Title',
@@ -1758,7 +1760,7 @@ describe('BookService', () => {
         { postSaveMode: 'sync' },
       );
 
-      expect(verifySpy).toHaveBeenCalledWith(5, user);
+      expect(verifySpy).toHaveBeenCalledWith(5, user, 'editor');
       expect(bookRepo.withTransaction).toHaveBeenCalledTimes(1);
       expect(bookRepo.updateMetadataFields).toHaveBeenCalledWith(
         5,
@@ -2395,7 +2397,7 @@ describe('BookService', () => {
       const result = await service.bulkReExtractCover([1, 2], user, onProgress);
 
       expect(result).toEqual({ processed: 2, updated: 1 });
-      expect(libraryService.verifyUserAccess).toHaveBeenCalledWith(user.id, 7, false);
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(user.id, 7, false, 'editor');
       expect(onProgress).toHaveBeenCalledTimes(2);
       expect(onProgress).toHaveBeenNthCalledWith(1, 1);
       expect(onProgress).toHaveBeenNthCalledWith(2, 2);
@@ -4252,7 +4254,7 @@ describe('BookService', () => {
   });
 
   describe('bulk metadata actions', () => {
-    it('bulkSetRating updates ratings and queues file writes and score recalculation', async () => {
+    it('bulkSetRating updates personal ratings without shared metadata effects', async () => {
       const { service, bookRepo, fileWriteService, fileRenameService, scoreService } = makeService();
       const user = makeUser({ id: 42 });
       vi.spyOn(service, 'verifyLibraryAccessForBookIds').mockResolvedValue(undefined);
@@ -4260,12 +4262,9 @@ describe('BookService', () => {
       await service.bulkSetRating([3, 5], 4, user);
 
       expect(bookRepo.bulkSetRating).toHaveBeenCalledWith([3, 5], 4, 42);
-      expect(fileWriteService.scheduleWrite).toHaveBeenNthCalledWith(1, 3, 'auto', 42);
-      expect(fileWriteService.scheduleWrite).toHaveBeenNthCalledWith(2, 5, 'auto', 42);
-      expect(fileRenameService.scheduleRename).toHaveBeenNthCalledWith(1, 3, 42);
-      expect(fileRenameService.scheduleRename).toHaveBeenNthCalledWith(2, 5, 42);
-      expect(scoreService.calculateAndSave).toHaveBeenNthCalledWith(1, 3);
-      expect(scoreService.calculateAndSave).toHaveBeenNthCalledWith(2, 5);
+      expect(fileWriteService.scheduleWrite).not.toHaveBeenCalled();
+      expect(fileRenameService.scheduleRename).not.toHaveBeenCalled();
+      expect(scoreService.calculateAndSave).not.toHaveBeenCalled();
     });
 
     it('bulkSetRating skips books where rating is metadata-locked', async () => {
@@ -4278,23 +4277,22 @@ describe('BookService', () => {
 
       expect(bookMetadataLockService.getBookIdsWithLockedField).toHaveBeenCalledWith([3, 5], 'rating');
       expect(bookRepo.bulkSetRating).toHaveBeenCalledWith([3], 4, 42);
-      expect(fileWriteService.scheduleWrite).toHaveBeenCalledTimes(1);
-      expect(fileWriteService.scheduleWrite).toHaveBeenCalledWith(3, 'auto', 42);
-      expect(fileRenameService.scheduleRename).toHaveBeenCalledTimes(1);
-      expect(fileRenameService.scheduleRename).toHaveBeenCalledWith(3, 42);
-      expect(scoreService.calculateAndSave).toHaveBeenCalledTimes(1);
-      expect(scoreService.calculateAndSave).toHaveBeenCalledWith(3);
+      expect(fileWriteService.scheduleWrite).not.toHaveBeenCalled();
+      expect(fileRenameService.scheduleRename).not.toHaveBeenCalled();
+      expect(scoreService.calculateAndSave).not.toHaveBeenCalled();
     });
 
-    it('bulkSetRating propagates score recalculation failures', async () => {
-      const { service, bookRepo, scoreService } = makeService();
+    it('bulkSetRating propagates personal rating persistence failures', async () => {
+      const { service, bookRepo, fileWriteService, fileRenameService } = makeService();
       const user = makeUser({ id: 42 });
       vi.spyOn(service, 'verifyLibraryAccessForBookIds').mockResolvedValue(undefined);
-      scoreService.calculateAndSave.mockRejectedValue(new Error('score exploded'));
+      bookRepo.bulkSetRating.mockRejectedValue(new Error('rating persistence failed'));
 
-      await expect(service.bulkSetRating([3], 4, user)).rejects.toThrow('score exploded');
+      await expect(service.bulkSetRating([3], 4, user)).rejects.toThrow('rating persistence failed');
 
       expect(bookRepo.bulkSetRating).toHaveBeenCalledWith([3], 4, 42);
+      expect(fileWriteService.scheduleWrite).not.toHaveBeenCalled();
+      expect(fileRenameService.scheduleRename).not.toHaveBeenCalled();
     });
 
     it('bulkSetMetadata updates a single metadata field and queues follow-up work', async () => {
@@ -4737,7 +4735,7 @@ describe('BookService', () => {
 
       await service.bulkEditMetadata([7, 8, 9], fields, user);
 
-      expect(verifySpy).toHaveBeenCalledWith([7, 8, 9], user);
+      expect(verifySpy).toHaveBeenCalledWith([7, 8, 9], user, 'editor');
     });
   });
 
@@ -5830,7 +5828,7 @@ describe('BookService', () => {
       const verifySpy = vi.spyOn(service, 'verifyLibraryAccessForBookIds').mockResolvedValue(undefined);
 
       await expect(service.resolveSelectionToIds({ bookIds: [1, 2] }, user)).resolves.toEqual([1, 2]);
-      expect(verifySpy).toHaveBeenCalledWith([1, 2], user);
+      expect(verifySpy).toHaveBeenCalledWith([1, 2], user, 'viewer');
     });
 
     it('throws when bookIds and query are both provided', async () => {
@@ -5847,6 +5845,46 @@ describe('BookService', () => {
       await expect(service.resolveSelectionToIds({ bookIds: [1, 2] }, makeUser())).rejects.toBe(error);
     });
 
+    it('requires editor access before returning an explicit metadata selection', async () => {
+      const { service } = makeService();
+      const user = makeUser();
+      const error = new ForbiddenException('Editor access required');
+      const verifySpy = vi.spyOn(service, 'verifyLibraryAccessForBookIds').mockRejectedValue(error);
+
+      await expect(service.resolveSelectionToIds({ bookIds: [10, 11] }, user, 'editor')).rejects.toBe(error);
+      expect(verifySpy).toHaveBeenCalledWith([10, 11], user, 'editor');
+    });
+
+    it('checks the matched libraries, not every matched book id, before resolving a query selection for editing', async () => {
+      const { service, bookRepo, libraryService, queryBuilder } = makeService();
+      const user = makeUser();
+      libraryService.findAll.mockResolvedValue([{ id: 5 }, { id: 9 }]);
+      queryBuilder.buildWhere.mockReturnValue('where-clause');
+      bookRepo.findDistinctLibraryIdsByWhere.mockResolvedValue([5, 9]);
+      const error = new ForbiddenException('Insufficient library access level');
+      libraryService.verifyUserAccessLevel.mockImplementation((_userId: number, libraryId: number) =>
+        libraryId === 9 ? Promise.reject(error) : Promise.resolve(),
+      );
+
+      await expect(service.resolveSelectionToIds({ query: {} }, user, 'editor')).rejects.toBe(error);
+      expect(bookRepo.findDistinctLibraryIdsByWhere).toHaveBeenCalledWith('where-clause');
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(user.id, 5, false, 'editor');
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(user.id, 9, false, 'editor');
+      expect(bookRepo.findIdsByWhere).not.toHaveBeenCalled();
+      expect(bookRepo.findLibraryIdsByBookIds).not.toHaveBeenCalled();
+    });
+
+    it('skips the matched-library lookup for superusers resolving a query selection for editing', async () => {
+      const { service, bookRepo, libraryService, queryBuilder } = makeService();
+      const user = makeUser({ isSuperuser: true });
+      libraryService.findAll.mockResolvedValue([{ id: 5 }]);
+      queryBuilder.buildWhere.mockReturnValue('where-clause');
+      bookRepo.findIdsByWhere.mockResolvedValue([10, 11]);
+
+      await expect(service.resolveSelectionToIds({ query: {} }, user, 'editor')).resolves.toEqual([10, 11]);
+      expect(bookRepo.findDistinctLibraryIdsByWhere).not.toHaveBeenCalled();
+    });
+
     it('rejects explicit selections when any requested book id is missing', async () => {
       const { service, bookRepo } = makeService();
       bookRepo.findLibraryIdsByBookIds.mockResolvedValue([{ id: 1, libraryId: 5 }]);
diff --git a/server/src/modules/book/book.service.ts b/server/src/modules/book/book.service.ts
index 92e0017e5..2b66a7e17 100644
--- a/server/src/modules/book/book.service.ts
+++ b/server/src/modules/book/book.service.ts
@@ -51,6 +51,7 @@ import {
   resolveUploadPath,
 } from '@bookorbit/types';
 import type {
+  AccessLevel,
   AudiobookChapter,
   BookCommunityRating,
   BookKoboState,
@@ -336,18 +337,34 @@ export class BookService {
     return code === 'ENOENT' || code === 'ENOTDIR';
   }
 
-  private async verifyLibraryAccessForBookIds(bookIds: number[], user: RequestUser): Promise<{ id: number; libraryId: number }[]> {
+  private async verifyLibraryAccessForBookIds(
+    bookIds: number[],
+    user: RequestUser,
+    required: AccessLevel = 'viewer',
+  ): Promise<{ id: number; libraryId: number }[]> {
     const uniqueBookIds = [...new Set(bookIds)];
     const rows = await this.bookRepo.findLibraryIdsByBookIds(uniqueBookIds);
     if (rows.length !== uniqueBookIds.length) {
       throw new NotFoundException('One or more books were not found');
     }
-    const uniqueLibraryIds = [...new Set(rows.map((row) => row.libraryId))];
-    const isSuperuser = this.isSuperuser(user);
-    await Promise.all(uniqueLibraryIds.map((libraryId) => this.libraryService.verifyUserAccess(user.id, libraryId, isSuperuser)));
+    await this.verifyLibraryAccessLevels(
+      rows.map((row) => row.libraryId),
+      user,
+      required,
+    );
     return rows;
   }
 
+  private async verifyLibraryAccessLevels(libraryIds: number[], user: RequestUser, required: AccessLevel): Promise<void> {
+    const isSuperuser = this.isSuperuser(user);
+    if (isSuperuser) return;
+    await mapWithConcurrency([...new Set(libraryIds)], 8, (libraryId) =>
+      required === 'viewer'
+        ? this.libraryService.verifyUserAccess(user.id, libraryId, isSuperuser)
+        : this.libraryService.verifyUserAccessLevel(user.id, libraryId, isSuperuser, required),
+    );
+  }
+
   private collectExistingProviderIds(meta: {
     googleBooksId?: string | null;
     goodreadsId?: string | null;
@@ -526,7 +543,7 @@ export class BookService {
     return normalized;
   }
 
-  async verifyBookAccess(bookId: number, user: RequestUser): Promise<void> {
+  async verifyBookAccess(bookId: number, user: RequestUser, required: AccessLevel = 'viewer'): Promise<void> {
     const libraryId = await this.bookRepo.findLibraryIdByBookId(bookId);
     if (libraryId === null) throw new NotFoundException(`Book ${bookId} not found`);
     // Not found, rather than forbidden. A 403 tells the caller the book exists, and book ids are
@@ -547,6 +564,7 @@ export class BookService {
       const passes = await this.checkBookPassesContentFilters(bookId, user.contentFilters);
       if (!passes) throw new NotFoundException(`Book ${bookId} not found`);
     }
+    if (required !== 'viewer') await this.libraryService.verifyUserAccessLevel(user.id, libraryId, this.isSuperuser(user), required);
   }
 
   setHardcoverEditionIdIfEmpty(bookId: number, hardcoverEditionId: string): Promise<boolean> {
@@ -566,12 +584,12 @@ export class BookService {
     return file;
   }
 
-  async resolveSelectionToIds(dto: BulkSelectionDto, user: RequestUser): Promise<number[]> {
+  async resolveSelectionToIds(dto: BulkSelectionDto, user: RequestUser, required: AccessLevel = 'viewer'): Promise<number[]> {
     if (dto.bookIds && dto.query) {
       throw new BadRequestException('bookIds and query are mutually exclusive');
     }
     if (dto.bookIds) {
-      await this.verifyLibraryAccessForBookIds(dto.bookIds, user);
+      await this.verifyLibraryAccessForBookIds(dto.bookIds, user, required);
       return dto.bookIds;
     }
     if (dto.query) {
@@ -592,6 +610,9 @@ export class BookService {
         timeZone,
         contentFilters: this.isSuperuser(user) ? undefined : user.contentFilters,
       });
+      if (required !== 'viewer' && !this.isSuperuser(user)) {
+        await this.verifyLibraryAccessLevels(await this.bookRepo.findDistinctLibraryIdsByWhere(where), user, required);
+      }
       return this.bookRepo.findIdsByWhere(where);
     }
     throw new BadRequestException('Either bookIds or query must be provided');
@@ -1565,6 +1586,7 @@ export class BookService {
     this.logger.log(`[${event}] [start] fileId=${fileId} userId=${user.id} - rename file started`);
     try {
       const file = await this.verifyFileAccess(fileId, user);
+      await this.libraryService.verifyUserAccessLevel(user.id, file.libraryId, this.isSuperuser(user), 'editor');
 
       let newAbsolutePath = file.absolutePath;
       if (dto.filename && dto.filename !== basename(file.absolutePath)) {
@@ -1739,7 +1761,7 @@ export class BookService {
     const startedAt = Date.now();
     this.logger.log(`[${event}] [start] bookId=${id} userId=${user.id} - metadata update started`);
     try {
-      await this.verifyBookAccess(id, user);
+      await this.verifyBookAccess(id, user, 'editor');
       await this.bookMetadataLockService.assertManualUpdateAllowed(id, dto);
       const { detail, scalarFieldCount, write, libraryAutoWriteEnabled } = await this.persistMetadataUpdate(id, dto, user, {
         postSaveMode: options.postSaveMode ?? 'schedule',
@@ -1759,7 +1781,7 @@ export class BookService {
   }
 
   async updateAddedAt(id: number, dto: UpdateBookAddedAtDto, user: RequestUser): Promise<BookDetailDto> {
-    await this.verifyBookAccess(id, user);
+    await this.verifyBookAccess(id, user, 'editor');
     const timeZone = this.resolveUserTimeZone(user);
     if (!isDateKey(dto.addedAt)) throw new BadRequestException('addedAt must be a valid date');
     if (dto.addedAt > toDateKeyInTimeZone(new Date(), timeZone)) throw new BadRequestException('addedAt cannot be in the future');
@@ -1780,7 +1802,7 @@ export class BookService {
       `[${event}] [start] bookId=${id} userId=${user.id} metadataFields=${Object.keys(metadata).length} lockFields=${dto.lockedFields.length} - metadata and lock update started`,
     );
     try {
-      await this.verifyBookAccess(id, user);
+      await this.verifyBookAccess(id, user, 'editor');
       // No lock guard here: this endpoint sets metadata and locks together from one explicit manual
       // request, so a field carried in the payload is always an intentional edit (the editor disables
       // locked inputs). Guarding on the final lock state would reject the legitimate unlock -> edit ->
@@ -2058,7 +2080,7 @@ export class BookService {
     const startedAt = Date.now();
     this.logger.log(`[${event}] [start] bookId=${id} userId=${user.id} - metadata lock update started`);
     try {
-      await this.verifyBookAccess(id, user);
+      await this.verifyBookAccess(id, user, 'editor');
       const normalizedLockedFields = await this.bookMetadataLockService.replaceLockedFields(id, lockedFields);
       const detail = await this.getDetail(id, user);
       this.logger.log(
@@ -2520,7 +2542,6 @@ export class BookService {
     const updatableIds = bookIds.filter((bookId) => !lockedIds.has(bookId));
     if (updatableIds.length > 0) {
       await this.bookRepo.bulkSetRating(updatableIds, rating, user.id);
-      await this.triggerPostMetadataUpdateEffects(updatableIds, user.id);
       this.achievementEvents?.emit(ACHIEVEMENT_EVENT_BOOK_RATING_CHANGED, {
         userId: user.id,
         bookIds: updatableIds,
@@ -2536,7 +2557,7 @@ export class BookService {
     const event = 'book.bulk.set_metadata';
     const startedAt = Date.now();
     this.logger.log(`[${event}] [start] userId=${user.id} count=${bookIds.length} field=${field} - bulk set metadata started`);
-    await this.verifyLibraryAccessForBookIds(bookIds, user);
+    await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
     const lockField = BULK_METADATA_LOCK_FIELD_BY_FIELD[field];
     const lockedIds = await this.bookMetadataLockService.getBookIdsWithLockedField(bookIds, lockField);
     const updatableIds = bookIds.filter((bookId) => !lockedIds.has(bookId));
@@ -2598,7 +2619,7 @@ export class BookService {
     const event = 'book.bulk.update_tags';
     const startedAt = Date.now();
     this.logger.log(`[${event}] [start] userId=${user.id} count=${bookIds.length} mode=${mode} tagCount=${tags.length} - bulk update tags started`);
-    await this.verifyLibraryAccessForBookIds(bookIds, user);
+    await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
     await this.bookRepo.withTransaction(async (tx) => {
       if (mode === 'replace') {
         for (const bookId of bookIds) {
@@ -2625,7 +2646,7 @@ export class BookService {
     const event = 'book.bulk.set_metadata_lock';
     const startedAt = Date.now();
     this.logger.log(`[${event}] [start] userId=${user.id} count=${bookIds.length} locked=${locked} - bulk set metadata lock started`);
-    await this.verifyLibraryAccessForBookIds(bookIds, user);
+    await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
     const fields: BookMetadataLockField[] = locked ? [...BOOK_METADATA_LOCK_FIELDS] : [];
     await this.bookMetadataLockService.bulkReplaceLockedFields(bookIds, fields);
     this.logger.log(
@@ -2646,7 +2667,7 @@ export class BookService {
       throw new BadRequestException('array fields with add or remove mode must have a non-empty values array');
     }
 
-    await this.verifyLibraryAccessForBookIds(bookIds, user);
+    await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
 
     const locksMap = await this.bookMetadataLockService.getLockedFieldsMap(bookIds);
     const fieldResults: Record<string, BulkEditFieldResult> = {};
@@ -2921,7 +2942,7 @@ export class BookService {
       if (!found) throw new NotFoundException(`Book ${id} not found`);
 
       const { book, authorRows, genreRows, communityRatingRows, fileRows, narratorRows } = found;
-      await this.libraryService.verifyUserAccess(user.id, book.books.libraryId, this.isSuperuser(user));
+      await this.libraryService.verifyUserAccessLevel(user.id, book.books.libraryId, this.isSuperuser(user), 'editor');
       const meta = book.book_metadata;
 
       const providerIds = this.collectExistingProviderIds(meta ?? {});
@@ -3074,7 +3095,7 @@ export class BookService {
         this.logger.log(`[${event}] [end] count=0 durationMs=${Date.now() - startedAt} processed=0 failed=0 - bulk refresh metadata completed`);
         return { processed: 0, failed: 0 };
       }
-      await this.verifyLibraryAccessForBookIds(bookIds, user);
+      await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
 
       let processed = 0;
       let failed = 0;
@@ -3137,7 +3158,7 @@ export class BookService {
         this.logger.log(`[${event}] [end] count=0 durationMs=${Date.now() - startedAt} processed=0 updated=0 - bulk re-extract cover completed`);
         return { processed: 0, updated: 0 };
       }
-      await this.verifyLibraryAccessForBookIds(bookIds, user);
+      await this.verifyLibraryAccessForBookIds(bookIds, user, 'editor');
 
       const [files, coverLockedBookIds, audioCoverLockedBookIds] = await Promise.all([
         this.bookRepo.findCoverSourceFilesByBookIds(bookIds),
@@ -3541,7 +3562,7 @@ export class BookService {
   }
 
   async writeAndRename(bookId: number, user: RequestUser): Promise<BookWriteAndRenameResult> {
-    await this.verifyBookAccess(bookId, user);
+    await this.verifyBookAccess(bookId, user, 'editor');
 
     this.fileWriteService?.cancelPendingWrite(bookId);
     this.fileRenameService?.cancelPendingRename(bookId);
diff --git a/server/src/modules/book/utils/assemble-book-cards.test.ts b/server/src/modules/book/utils/assemble-book-cards.test.ts
index 31553751d..f6af11516 100644
--- a/server/src/modules/book/utils/assemble-book-cards.test.ts
+++ b/server/src/modules/book/utils/assemble-book-cards.test.ts
@@ -29,6 +29,11 @@ function makeBookRow(id: number, overrides?: Partial<Parameters<typeof assembleB
 }
 
 describe('assembleBookCards', () => {
+  it('preserves each book library ID for permission checks', () => {
+    const cards = assembleBookCards([makeBookRow(1, { libraryId: 7 }), makeBookRow(2, { libraryId: 8 })], [], [], [], []);
+    expect(cards.map((card) => card.libraryId)).toEqual([7, 8]);
+  });
+
   it('assembles a simple book card with authors and files', () => {
     const rows = [makeBookRow(1)];
     const authorRows = [{ bookId: 1, name: 'Author A' }];
diff --git a/server/src/modules/book/utils/assemble-book-cards.ts b/server/src/modules/book/utils/assemble-book-cards.ts
index 3ebf6ceec..e1d82b4b7 100644
--- a/server/src/modules/book/utils/assemble-book-cards.ts
+++ b/server/src/modules/book/utils/assemble-book-cards.ts
@@ -13,6 +13,7 @@ function normalizeLockedFields(raw: string[] | null | undefined): BookMetadataLo
 
 type BookRow = {
   id: number;
+  libraryId?: number;
   status: string;
   coverAspectRatio: string;
   primaryFileId?: number | null;
@@ -209,6 +210,7 @@ export function assembleBookCards(
 
     return {
       id: row.id,
+      libraryId: row.libraryId,
       status: row.status,
       coverAspectRatio: normalizeCoverAspectRatio(row.coverAspectRatio),
       title: row.title ?? basename(row.folderPath),
diff --git a/server/src/modules/cover/cover.service.test.ts b/server/src/modules/cover/cover.service.test.ts
index c55c5c5b5..f5df8d205 100644
--- a/server/src/modules/cover/cover.service.test.ts
+++ b/server/src/modules/cover/cover.service.test.ts
@@ -99,7 +99,7 @@ function createMutationService(options?: { assertFieldsUnlocked?: ReturnType<typ
     { findLibraryIdByBookId: vi.fn().mockResolvedValue(7) } as never,
     { assertFieldsUnlocked } as never,
     fileWriteService as never,
-    { verifyUserAccess: vi.fn().mockResolvedValue(undefined) } as never,
+    { verifyUserAccess: vi.fn().mockResolvedValue(undefined), verifyUserAccessLevel: vi.fn().mockResolvedValue(undefined) } as never,
     options?.providerRegistry ?? ({ select: vi.fn().mockReturnValue([]) } as unknown as CoverProviderRegistry),
     scoreService as never,
     coverStore as never,
diff --git a/server/src/modules/cover/cover.service.ts b/server/src/modules/cover/cover.service.ts
index cc51cfd0e..ab74d0c54 100644
--- a/server/src/modules/cover/cover.service.ts
+++ b/server/src/modules/cover/cover.service.ts
@@ -212,7 +212,7 @@ export class CoverService {
   private async verifyAccess(bookId: number, user: RequestUser): Promise<void> {
     const libraryId = await this.bookReadService.findLibraryIdByBookId(bookId);
     if (libraryId === null) throw new NotFoundException(`Book ${bookId} not found`);
-    await this.libraryService.verifyUserAccess(user.id, libraryId, user.isSuperuser);
+    await this.libraryService.verifyUserAccessLevel(user.id, libraryId, user.isSuperuser, 'editor');
   }
 
   /**
diff --git a/server/src/modules/entity-manager/entity-manager.service.test.ts b/server/src/modules/entity-manager/entity-manager.service.test.ts
index 325d82b1c..ca69e5307 100644
--- a/server/src/modules/entity-manager/entity-manager.service.test.ts
+++ b/server/src/modules/entity-manager/entity-manager.service.test.ts
@@ -38,6 +38,7 @@ function makeService() {
 
   const libraryService = {
     findAccessibleLibraryIds: vi.fn().mockResolvedValue([1, 2]),
+    findEditableLibraryIds: vi.fn().mockResolvedValue([1, 2]),
   };
 
   const fileWriteService = {
@@ -604,6 +605,27 @@ describe('EntityManagerService', () => {
   });
 
   describe('merge', () => {
+    it('scopes every mutation to libraries the user can edit, not every library they can read', async () => {
+      const { service, strategies, libraryService } = makeService();
+      libraryService.findAccessibleLibraryIds.mockResolvedValue([1, 2, 3]);
+      libraryService.findEditableLibraryIds.mockResolvedValue([2]);
+      (strategies.tag.merge as any).mockResolvedValue({ affectedBookIds: [] });
+      (strategies.tag.rename as any).mockResolvedValue({ affectedBookIds: [] });
+      (strategies.genre.deleteEntity as any).mockResolvedValue({ affectedBookIds: [] });
+      (strategies.author.split as any).mockResolvedValue({ originalName: 'Author', newEntities: [], affectedBookIds: [] });
+
+      await service.merge('tag', mockUser, 1, [2], false);
+      await service.rename('tag', mockUser, 1, 'Renamed', false);
+      await service.deleteEntity('genre', mockUser, 5, 'hard', false);
+      await service.split('author', mockUser, 5, ['Author A', 'Author B'], false);
+
+      expect(strategies.tag.merge).toHaveBeenCalledWith(expect.objectContaining({ libraryIds: [2] }));
+      expect(strategies.tag.rename).toHaveBeenCalledWith(expect.objectContaining({ libraryIds: [2] }));
+      expect(strategies.genre.deleteEntity).toHaveBeenCalledWith(expect.objectContaining({ libraryIds: [2] }));
+      expect(strategies.author.split).toHaveBeenCalledWith(expect.objectContaining({ libraryIds: [2] }));
+      expect(libraryService.findEditableLibraryIds).toHaveBeenCalledTimes(4);
+    });
+
     it('calls strategy merge and cleans up dismissed pairs for first-class', async () => {
       const { service, strategies, repo, duplicateCompute, metadataScoreService } = makeService();
       (strategies.author.merge as any).mockResolvedValue({
diff --git a/server/src/modules/entity-manager/entity-manager.service.ts b/server/src/modules/entity-manager/entity-manager.service.ts
index bfa4e71bd..d25675858 100644
--- a/server/src/modules/entity-manager/entity-manager.service.ts
+++ b/server/src/modules/entity-manager/entity-manager.service.ts
@@ -242,7 +242,7 @@ export class EntityManagerService {
 
     try {
       const strategy = this.getStrategy(entityType);
-      const libraryIds = await this.libraryService.findAccessibleLibraryIds(user);
+      const libraryIds = await this.libraryService.findEditableLibraryIds(user);
       const result = await strategy.merge({ targetId, sourceIds, userId: user.id, libraryIds });
 
       const nonInlineSourceIds: number[] = [];
@@ -291,7 +291,7 @@ export class EntityManagerService {
 
     try {
       const strategy = this.getStrategy(entityType);
-      const libraryIds = await this.libraryService.findAccessibleLibraryIds(user);
+      const libraryIds = await this.libraryService.findEditableLibraryIds(user);
       const result = await strategy.rename({ entityId, newName, userId: user.id, libraryIds });
 
       if (writeFiles) {
@@ -333,7 +333,7 @@ export class EntityManagerService {
 
     try {
       const strategy = this.getStrategy(entityType);
-      const libraryIds = await this.libraryService.findAccessibleLibraryIds(user);
+      const libraryIds = await this.libraryService.findEditableLibraryIds(user);
       const effectiveMode = !strategy.isInline && mode === 'soft' && (await strategy.getBookCount(entityId)) === 0 ? 'hard' : mode;
       const result = await strategy.deleteEntity({ entityId, mode: effectiveMode, libraryIds });
 
@@ -400,7 +400,7 @@ export class EntityManagerService {
         throw new BadRequestException('Split requires at least 2 new names');
       }
 
-      const libraryIds = await this.libraryService.findAccessibleLibraryIds(user);
+      const libraryIds = await this.libraryService.findEditableLibraryIds(user);
       const result = await strategy.split({ entityId, newNames, libraryIds });
 
       await this.repo.deleteDismissedPairsForEntity(entityType, entityId);
diff --git a/server/src/modules/entity-manager/strategies/entity-book-scope.ts b/server/src/modules/entity-manager/strategies/entity-book-scope.ts
index 90d2addb0..0cb56c4cc 100644
--- a/server/src/modules/entity-manager/strategies/entity-book-scope.ts
+++ b/server/src/modules/entity-manager/strategies/entity-book-scope.ts
@@ -49,6 +49,6 @@ export async function assertEntityRelationsWithinLibraries(
   `);
 
   if (result.rows.length > 0) {
-    throw new ForbiddenException('Entity is used by a library outside the accessible scope');
+    throw new ForbiddenException('Entity is used by a library you cannot edit');
   }
 }
diff --git a/server/src/modules/library/library.constants.ts b/server/src/modules/library/library.constants.ts
index 7760b7afa..a95de4b44 100644
--- a/server/src/modules/library/library.constants.ts
+++ b/server/src/modules/library/library.constants.ts
@@ -1,6 +1,7 @@
 import type { AccessLevel, AddedAtSource, CoverAspectRatio, OrganizationMode } from '@bookorbit/types';
 
 export const LIBRARY_ACCESS_LEVELS = ['viewer', 'editor', 'owner'] as const satisfies readonly AccessLevel[];
+export const EDITOR_ACCESS_LEVELS = ['editor', 'owner'] as const satisfies readonly AccessLevel[];
 export const LIBRARY_COVER_ASPECT_RATIOS = ['2/3', '1/1'] as const satisfies readonly CoverAspectRatio[];
 export const LIBRARY_ORGANIZATION_MODES = ['book_per_file', 'book_per_folder'] as const satisfies readonly OrganizationMode[];
 export const LIBRARY_ADDED_AT_SOURCES = ['imported', 'file_modified', 'file_created'] as const satisfies readonly AddedAtSource[];
diff --git a/server/src/modules/library/library.repository.ts b/server/src/modules/library/library.repository.ts
index 94e863ec6..2bea52529 100644
--- a/server/src/modules/library/library.repository.ts
+++ b/server/src/modules/library/library.repository.ts
@@ -97,11 +97,16 @@ export class LibraryRepository {
       .orderBy(libraries.id);
   }
 
-  findAccessibleIdsForUser(userId: number) {
+  findAccessibleIdsForUser(userId: number, accessLevels?: readonly AccessLevel[]) {
+    const accessJoin = and(
+      eq(schema.userLibraryAccess.libraryId, libraries.id),
+      eq(schema.userLibraryAccess.userId, userId),
+      accessLevels ? inArray(schema.userLibraryAccess.accessLevel, [...accessLevels]) : undefined,
+    );
     return this.db
       .select({ id: libraries.id })
       .from(libraries)
-      .innerJoin(schema.userLibraryAccess, and(eq(schema.userLibraryAccess.libraryId, libraries.id), eq(schema.userLibraryAccess.userId, userId)))
+      .innerJoin(schema.userLibraryAccess, accessJoin)
       .where(visibleLibraryCondition)
       .orderBy(libraries.displayOrder, libraries.name);
   }
diff --git a/server/src/modules/library/library.service.test.ts b/server/src/modules/library/library.service.test.ts
index 329dd108f..dc69490b4 100644
--- a/server/src/modules/library/library.service.test.ts
+++ b/server/src/modules/library/library.service.test.ts
@@ -170,6 +170,21 @@ describe('LibraryService', () => {
     ).resolves.toEqual([3, 4]);
   });
 
+  it('findEditableLibraryIds reads all IDs for superusers and editor-or-owner IDs for normal users', async () => {
+    libraryRepo.findAllIds.mockResolvedValue([{ id: 1 }, { id: 2 }]);
+    libraryRepo.findAccessibleIdsForUser.mockResolvedValue([{ id: 4 }]);
+
+    await expect(service.findEditableLibraryIds({ id: 99, isSuperuser: true, contentFilters: EMPTY_CONTENT_FILTER_RULES } as any)).resolves.toEqual([
+      1, 2,
+    ]);
+    expect(libraryRepo.findAccessibleIdsForUser).not.toHaveBeenCalled();
+
+    await expect(service.findEditableLibraryIds({ id: 42, isSuperuser: false, contentFilters: EMPTY_CONTENT_FILTER_RULES } as any)).resolves.toEqual([
+      4,
+    ]);
+    expect(libraryRepo.findAccessibleIdsForUser).toHaveBeenCalledWith(42, ['editor', 'owner']);
+  });
+
   it('findOne returns library details and normalizes organization mode', async () => {
     libraryRepo.findById.mockResolvedValue([{ id: 10, name: 'Main', organizationMode: null }]);
     libraryRepo.findFoldersByLibrary.mockResolvedValue([{ id: 50, path: '/books/main' }]);
diff --git a/server/src/modules/library/library.service.ts b/server/src/modules/library/library.service.ts
index 4ab651bcc..b6e7d766f 100644
--- a/server/src/modules/library/library.service.ts
+++ b/server/src/modules/library/library.service.ts
@@ -35,6 +35,7 @@ import {
   DEFAULT_LIBRARY_ADDED_AT_SOURCE,
   DEFAULT_LIBRARY_COVER_ASPECT_RATIO,
   DEFAULT_LIBRARY_ORGANIZATION_MODE,
+  EDITOR_ACCESS_LEVELS,
   LIBRARY_METADATA_PRECEDENCE_DEFAULT,
 } from './library.constants';
 import { resolveLibraryFolderRoles, type LibraryFolderInput } from './library-folder-roles.utils';
@@ -158,6 +159,13 @@ export class LibraryService {
     return ids.map(({ id }) => id);
   }
 
+  async findEditableLibraryIds(user: RequestUser): Promise<number[]> {
+    const ids = user.isSuperuser
+      ? await this.libraryRepo.findAllIds()
+      : await this.libraryRepo.findAccessibleIdsForUser(user.id, EDITOR_ACCESS_LEVELS);
+    return ids.map(({ id }) => id);
+  }
+
   async findOne(id: number) {
     const [library] = await this.libraryRepo.findById(id);
     if (!library) throw new NotFoundException('Library not found');
diff --git a/server/src/modules/scanner/scanner.repository.test.ts b/server/src/modules/scanner/scanner.repository.test.ts
index cf36219f3..848bd313a 100644
--- a/server/src/modules/scanner/scanner.repository.test.ts
+++ b/server/src/modules/scanner/scanner.repository.test.ts
@@ -236,7 +236,7 @@ describe('ScannerRepository', () => {
         coverAspectRatio: '1/1',
       }),
     ]);
-    expect(db.select.mock.calls[0]?.[0]).toEqual(expect.objectContaining({ coverAspectRatio: expect.anything() }));
+    expect(db.select.mock.calls[0]?.[0]).toEqual(expect.objectContaining({ libraryId: expect.anything(), coverAspectRatio: expect.anything() }));
     expect(chains.select[0]?.mocks.innerJoin).toHaveBeenCalledTimes(1);
   });
 
diff --git a/server/src/modules/scanner/scanner.repository.ts b/server/src/modules/scanner/scanner.repository.ts
index 0fe702404..54822c446 100644
--- a/server/src/modules/scanner/scanner.repository.ts
+++ b/server/src/modules/scanner/scanner.repository.ts
@@ -659,6 +659,7 @@ export class ScannerRepository {
       this.db
         .select({
           id: books.id,
+          libraryId: books.libraryId,
           status: books.status,
           coverAspectRatio: libraries.coverAspectRatio,
           formatPriority: libraries.formatPriority,
diff --git a/server/src/modules/upload/upload.service.test.ts b/server/src/modules/upload/upload.service.test.ts
index 9e9434c82..960fc0bfe 100644
--- a/server/src/modules/upload/upload.service.test.ts
+++ b/server/src/modules/upload/upload.service.test.ts
@@ -89,7 +89,7 @@ describe('UploadService', () => {
   };
 
   const appSettings = { getUploadPattern: vi.fn(), getUploadPatternBookPerFolder: vi.fn(), isCrossPlatformPathSanitizationEnabled: vi.fn() };
-  const libraryService = { verifyUserAccess: vi.fn() };
+  const libraryService = { verifyUserAccess: vi.fn(), verifyUserAccessLevel: vi.fn() };
   const validator = {
     sanitizeFilename: vi.fn(),
     validateFormat: vi.fn(),
@@ -142,6 +142,7 @@ describe('UploadService', () => {
     storage.cleanup.mockResolvedValue(undefined);
     processor.createBookRecord.mockResolvedValue({ bookId: 99, created: true });
     libraryService.verifyUserAccess.mockResolvedValue(undefined);
+    libraryService.verifyUserAccessLevel.mockResolvedValue(undefined);
     appSettings.getUploadPattern.mockResolvedValue(null);
     appSettings.getUploadPatternBookPerFolder.mockResolvedValue(null);
     appSettings.isCrossPlatformPathSanitizationEnabled.mockResolvedValue(false);
@@ -1443,9 +1444,44 @@ describe('UploadService', () => {
       db.select.mockReturnValueOnce(selectChain([{ id: 10, libraryId: 1 }]));
 
       await expect(service.renameBookFiles(10, user)).resolves.toBeUndefined();
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(user.id, 1, false, 'editor');
       expect(mockRenameService.performRename).toHaveBeenCalledWith(10, user.id, true, false);
     });
 
+    it('rejects a viewer before resolving or invoking the rename service', async () => {
+      const renameService = { performRename: vi.fn() };
+      moduleRef.get.mockReturnValue(renameService);
+      db.select.mockReturnValueOnce(selectChain([{ id: 10, libraryId: 1 }]));
+      libraryService.verifyUserAccessLevel.mockRejectedValue(new ForbiddenException('Editor access required'));
+
+      await expect(service.renameBookFiles(10, user)).rejects.toThrow(ForbiddenException);
+      expect(moduleRef.get).not.toHaveBeenCalled();
+      expect(renameService.performRename).not.toHaveBeenCalled();
+    });
+
+    it('checks the current role again after a downgrade', async () => {
+      const renameService = { performRename: vi.fn().mockResolvedValue({ status: 'success' }) };
+      moduleRef.get.mockReturnValue(renameService);
+      db.select.mockReturnValue(selectChain([{ id: 10, libraryId: 1 }]));
+      await service.renameBookFiles(10, user);
+      renameService.performRename.mockClear();
+      libraryService.verifyUserAccessLevel.mockRejectedValue(new ForbiddenException('Editor access required'));
+
+      await expect(service.renameBookFiles(10, user)).rejects.toThrow(ForbiddenException);
+      expect(renameService.performRename).not.toHaveBeenCalled();
+    });
+
+    it('passes the superuser bypass through the editor authorization check', async () => {
+      const caller = { ...user, isSuperuser: true };
+      const renameService = { performRename: vi.fn().mockResolvedValue({ status: 'success' }) };
+      moduleRef.get.mockReturnValue(renameService);
+      db.select.mockReturnValueOnce(selectChain([{ id: 10, libraryId: 1 }]));
+
+      await service.renameBookFiles(10, caller);
+      expect(libraryService.verifyUserAccessLevel).toHaveBeenCalledWith(caller.id, 1, true, 'editor');
+      expect(renameService.performRename).toHaveBeenCalledWith(10, caller.id, true, false);
+    });
+
     it('throws NotFoundException when book does not exist', async () => {
       db.select.mockReturnValueOnce(selectChain([]));
 
@@ -1454,7 +1490,7 @@ describe('UploadService', () => {
 
     it('throws ForbiddenException when user has no library access', async () => {
       db.select.mockReturnValueOnce(selectChain([{ id: 10, libraryId: 1 }]));
-      libraryService.verifyUserAccess.mockRejectedValue(new ForbiddenException('No access'));
+      libraryService.verifyUserAccessLevel.mockRejectedValue(new ForbiddenException('No access to this library'));
 
       await expect(service.renameBookFiles(10, user)).rejects.toBeInstanceOf(ForbiddenException);
     });
diff --git a/server/src/modules/upload/upload.service.ts b/server/src/modules/upload/upload.service.ts
index ed6a93a47..d5207a808 100644
--- a/server/src/modules/upload/upload.service.ts
+++ b/server/src/modules/upload/upload.service.ts
@@ -388,7 +388,7 @@ export class UploadService {
 
     if (!bookRow) throw new NotFoundException(`Book ${bookId} not found`);
 
-    await this.libraryService.verifyUserAccess(user.id, bookRow.libraryId, user.isSuperuser);
+    await this.libraryService.verifyUserAccessLevel(user.id, bookRow.libraryId, user.isSuperuser, 'editor');
 
     const fileRenameService = this.resolveFileRenameService();
     if (!fileRenameService) {
diff --git a/server/src/modules/user/user.repository.test.ts b/server/src/modules/user/user.repository.test.ts
index e43c0cae3..13a5fd843 100644
--- a/server/src/modules/user/user.repository.test.ts
+++ b/server/src/modules/user/user.repository.test.ts
@@ -8,6 +8,7 @@ vi.mock('drizzle-orm', () => ({
   inArray: vi.fn((left: unknown, right: unknown) => ({ op: 'inArray', left, right })),
   isNull: vi.fn((value: unknown) => ({ op: 'isNull', value })),
   ne: vi.fn((left: unknown, right: unknown) => ({ op: 'ne', left, right })),
+  notInArray: vi.fn((left: unknown, right: unknown) => ({ op: 'notInArray', left, right })),
   or: vi.fn((...clauses: unknown[]) => ({ op: 'or', clauses })),
   sql: Object.assign(
     vi.fn((strings: TemplateStringsArray, ...values: unknown[]) => ({ op: 'sql', text: strings.join(''), values })),
@@ -843,7 +844,7 @@ describe('UserRepository', () => {
     expect(onConflictDoNothing).toHaveBeenCalled();
   });
 
-  it('findLibraryIdsByUserId and replaceViewerLibraries manage user-library rows', async () => {
+  it('findLibraryIdsByUserId and replaceLibraries manage user-library rows', async () => {
     const where = vi.fn().mockResolvedValue([{ libraryId: 10 }, { libraryId: 11 }]);
     const from = vi.fn().mockReturnValue({ where });
     select.mockReturnValue({ from });
@@ -852,7 +853,8 @@ describe('UserRepository', () => {
 
     const txDeleteWhere = vi.fn().mockResolvedValue(undefined);
     const txDelete = vi.fn().mockReturnValue({ where: txDeleteWhere });
-    const txInsertValues = vi.fn().mockResolvedValue(undefined);
+    const txOnConflictDoNothing = vi.fn().mockResolvedValue(undefined);
+    const txInsertValues = vi.fn().mockReturnValue({ onConflictDoNothing: txOnConflictDoNothing });
     const txInsert = vi.fn().mockReturnValue({ values: txInsertValues });
     db.transaction.mockImplementation(async (cb: (tx: unknown) => Promise<void>) =>
       cb({
@@ -861,15 +863,24 @@ describe('UserRepository', () => {
       }),
     );
 
-    await repo.replaceViewerLibraries(2, []);
+    await repo.replaceLibraries(2, []);
     expect(txDelete).toHaveBeenCalledWith(schema.userLibraryAccess);
     expect(txDeleteWhere).toHaveBeenCalledWith(expect.objectContaining({ op: 'eq', left: schema.userLibraryAccess.userId, right: 2 }));
     expect(txInsert).not.toHaveBeenCalled();
 
-    await repo.replaceViewerLibraries(2, [10, 11]);
+    txDeleteWhere.mockClear();
+    await repo.replaceLibraries(2, [10, 11]);
+    expect(txDeleteWhere).toHaveBeenCalledWith({
+      op: 'and',
+      clauses: [
+        { op: 'eq', left: schema.userLibraryAccess.userId, right: 2 },
+        { op: 'notInArray', left: schema.userLibraryAccess.libraryId, right: [10, 11] },
+      ],
+    });
     expect(txInsertValues).toHaveBeenCalledWith([
       { userId: 2, libraryId: 10, accessLevel: 'viewer' },
       { userId: 2, libraryId: 11, accessLevel: 'viewer' },
     ]);
+    expect(txOnConflictDoNothing).toHaveBeenCalled();
   });
 });
diff --git a/server/src/modules/user/user.repository.ts b/server/src/modules/user/user.repository.ts
index a2dfeb56b..cd665b3ca 100644
--- a/server/src/modules/user/user.repository.ts
+++ b/server/src/modules/user/user.repository.ts
@@ -1,6 +1,6 @@
 import { Inject, Injectable } from '@nestjs/common';
 import { createHash, randomBytes, randomUUID } from 'crypto';
-import { and, asc, count, desc, eq, ilike, inArray, isNull, ne, or, sql } from 'drizzle-orm';
+import { and, asc, count, desc, eq, ilike, inArray, isNull, ne, notInArray, or, sql } from 'drizzle-orm';
 import type { SQL } from 'drizzle-orm';
 import { NodePgDatabase } from 'drizzle-orm/node-postgres';
 import { hash } from 'bcryptjs';
@@ -677,11 +677,21 @@ export class UserRepository {
     return rows.map((r) => r.id);
   }
 
-  async replaceViewerLibraries(userId: number, libraryIds: number[]): Promise<void> {
+  /**
+   * Libraries that stay assigned keep their access level: it is set per library from the library's
+   * access settings, and resetting it here would silently revoke editing on every user save.
+   */
+  async replaceLibraries(userId: number, libraryIds: number[]): Promise<void> {
     await this.db.transaction(async (tx) => {
-      await tx.delete(schema.userLibraryAccess).where(eq(schema.userLibraryAccess.userId, userId));
+      const ownedByUser = eq(schema.userLibraryAccess.userId, userId);
+      await tx
+        .delete(schema.userLibraryAccess)
+        .where(libraryIds.length > 0 ? and(ownedByUser, notInArray(schema.userLibraryAccess.libraryId, libraryIds)) : ownedByUser);
       if (libraryIds.length > 0) {
-        await tx.insert(schema.userLibraryAccess).values(libraryIds.map((libraryId) => ({ userId, libraryId, accessLevel: 'viewer' as const })));
+        await tx
+          .insert(schema.userLibraryAccess)
+          .values(libraryIds.map((libraryId) => ({ userId, libraryId, accessLevel: 'viewer' as const })))
+          .onConflictDoNothing();
       }
     });
   }
diff --git a/server/src/modules/user/user.service.test.ts b/server/src/modules/user/user.service.test.ts
index 4130852bb..ad64575ed 100644
--- a/server/src/modules/user/user.service.test.ts
+++ b/server/src/modules/user/user.service.test.ts
@@ -43,7 +43,7 @@ describe('UserService', () => {
     setSuperuser: vi.fn(),
     assignViewerLibraries: vi.fn(),
     findLibraryIdsByUserId: vi.fn(),
-    replaceViewerLibraries: vi.fn(),
+    replaceLibraries: vi.fn(),
     findExistingLibraryIds: vi.fn(),
     findSettingsById: vi.fn(),
   };
@@ -658,7 +658,7 @@ describe('UserService', () => {
 
     await service.setLibraries(2, [3, 7, 3], reqUser({ isSuperuser: true }));
 
-    expect(userRepo.replaceViewerLibraries).toHaveBeenCalledWith(2, [3, 7]);
+    expect(userRepo.replaceLibraries).toHaveBeenCalledWith(2, [3, 7]);
   });
 
   it('getContentFilters throws when the target user does not exist', async () => {
@@ -831,7 +831,7 @@ describe('UserService.updateSeriesCollapsePreferences', () => {
     setSuperuser: vi.fn(),
     assignViewerLibraries: vi.fn(),
     findLibraryIdsByUserId: vi.fn(),
-    replaceViewerLibraries: vi.fn(),
+    replaceLibraries: vi.fn(),
     findExistingLibraryIds: vi.fn(),
   };
   const contentFilterRepo = {
diff --git a/server/src/modules/user/user.service.ts b/server/src/modules/user/user.service.ts
index 3f6e8832f..1108653f7 100644
--- a/server/src/modules/user/user.service.ts
+++ b/server/src/modules/user/user.service.ts
@@ -431,7 +431,7 @@ export class UserService {
 
     const normalizedLibraryIds = this.uniqueIds(libraryIds);
     await this.assertKnownLibraryIds(normalizedLibraryIds);
-    await this.userRepo.replaceViewerLibraries(targetUserId, normalizedLibraryIds);
+    await this.userRepo.replaceLibraries(targetUserId, normalizedLibraryIds);
   }
 
   async adminResetPassword(targetUserId: number, requestingUser: RequestUser) {
diff --git a/server/test/metadata-write.e2e-spec.ts b/server/test/metadata-write.e2e-spec.ts
index 0dcb9ae4a..aaa619a98 100644
--- a/server/test/metadata-write.e2e-spec.ts
+++ b/server/test/metadata-write.e2e-spec.ts
@@ -8,6 +8,7 @@ import { Permission, type LibraryFileSyncProgressEvent } from '@bookorbit/types'
 import * as schema from '../src/db/schema';
 import { BookService, type MetadataUpdateFailpoint } from '../src/modules/book/book.service';
 import { FileWriteService } from '../src/modules/file-write/file-write.service';
+import { FileRenameService } from '../src/modules/file-write/file-rename.service';
 import { extractCb7Metadata, extractCbzMetadata } from '../src/modules/metadata/lib/cbz-metadata';
 import { extractEpubMetadata } from '../src/modules/metadata/lib/epub';
 import { parseFb2File } from '../src/modules/metadata/lib/fb2-parser';
@@ -1600,6 +1601,147 @@ describe('Metadata write operations (e2e)', { timeout: SCENARIO_TIMEOUT_MS }, ()
   });
 
   describe('access control', () => {
+    it('rejects viewer forced renames and keeps personal ratings free of shared file effects', async () => {
+      const library = await createLibraryWithFolder(context, { mode: 'book_per_file' });
+      await createEpubFixture(library.folderPath, 'access/viewer.epub');
+      await triggerAndWaitForLibraryScan(context, library.libraryId);
+      const book = await locateBookFileByRelPath(context, library.libraryId, 'access/viewer.epub');
+      const before = await readFile(book.absolutePath);
+      const metadataBefore = await context.db.query.bookMetadata.findFirst({ where: eq(schema.bookMetadata.bookId, book.bookId) });
+      const caller = await createUserAndLogin(context, { permissions: [Permission.LibraryEditMetadata] });
+      await grantLibraryAccess(context, caller.userId, library.libraryId, 'viewer');
+      await setLibraryFileWriteSettings(context.db, library.libraryId, { fileWriteEnabled: true, fileWriteEpubEnabled: true });
+      await context.db.update(schema.libraries).set({ fileRenameEnabled: true }).where(eq(schema.libraries.id, library.libraryId));
+      const renameService = context.app.get(FileRenameService);
+      const writeService = context.app.get(FileWriteService);
+      const performRename = vi.spyOn(renameService, 'performRename');
+      const scheduleRename = vi.spyOn(renameService, 'scheduleRename');
+      const scheduleWrite = vi.spyOn(writeService, 'scheduleWrite');
+      try {
+        const rename = await context.app.inject({
+          method: 'POST',
+          url: `/api/v1/books/${book.bookId}/rename-files`,
+          headers: authHeader(caller.accessToken),
+        });
+        expect(rename.statusCode).toBe(403);
+        expect(performRename).not.toHaveBeenCalled();
+        for (const rating of [4, null]) {
+          const response = await context.app.inject({
+            method: 'POST',
+            url: '/api/v1/books/bulk-set-rating',
+            headers: authHeader(caller.accessToken),
+            payload: { bookIds: [book.bookId], rating },
+          });
+          expect(response.statusCode).toBe(204);
+          const personal = await context.db.query.userBookRatings.findFirst({ where: eq(schema.userBookRatings.userId, caller.userId) });
+          expect(personal).toMatchObject({ bookId: book.bookId, rating });
+        }
+        expect(scheduleWrite).not.toHaveBeenCalled();
+        expect(scheduleRename).not.toHaveBeenCalled();
+        expect(await readFile(book.absolutePath)).toEqual(before);
+        const metadataAfter = await context.db.query.bookMetadata.findFirst({ where: eq(schema.bookMetadata.bookId, book.bookId) });
+        expect(metadataAfter).toEqual(metadataBefore);
+      } finally {
+        performRename.mockRestore();
+        scheduleRename.mockRestore();
+        scheduleWrite.mockRestore();
+      }
+    });
+
+    it('enforces editor access for every manual metadata save and rejects mixed-library bulk writes atomically', async () => {
+      const editor = await createLibraryWithFolder(context, { mode: 'book_per_folder' });
+      const viewer = await createLibraryWithFolder(context, { mode: 'book_per_folder' });
+      const caller = await createUserAndLogin(context, { permissions: [Permission.LibraryEditMetadata] });
+      await grantLibraryAccess(context, caller.userId, editor.libraryId, 'editor');
+      await grantLibraryAccess(context, caller.userId, viewer.libraryId, 'viewer');
+      const bookIds: number[] = [];
+      for (const library of [editor, viewer]) {
+        const [book] = await context.db
+          .insert(schema.books)
+          .values({
+            libraryId: library.libraryId,
+            libraryFolderId: library.libraryFolderId,
+            folderPath: library.folderPath,
+          })
+          .returning({ id: schema.books.id });
+        await context.db.insert(schema.bookMetadata).values({ bookId: book.id, title: 'Original', publisher: 'Original publisher' });
+        bookIds.push(book.id);
+      }
+      const routes = [
+        { path: 'metadata', payload: { title: 'Forbidden title' } },
+        { path: 'metadata-and-locks', payload: { metadata: { title: 'Forbidden title' }, lockedFields: ['title'] } },
+        { path: 'metadata-locks', payload: { lockedFields: ['title'] } },
+      ];
+      for (const route of routes) {
+        const response = await context.app.inject({
+          method: 'PATCH',
+          url: `/api/v1/books/${bookIds[1]}/${route.path}`,
+          headers: authHeader(caller.accessToken),
+          payload: route.payload,
+        });
+        expect(response.statusCode).toBe(403);
+        const metadata = await context.db.query.bookMetadata.findFirst({ where: eq(schema.bookMetadata.bookId, bookIds[1]) });
+        expect(metadata?.title).toBe('Original');
+        expect(metadata?.lockedFields).toEqual([]);
+      }
+      for (const route of ['bulk-refresh-metadata', 'bulk-re-extract-cover']) {
+        const response = await context.app.inject({
+          method: 'POST',
+          url: `/api/v1/books/${route}`,
+          headers: authHeader(caller.accessToken),
+          payload: { bookIds },
+        });
+        expect(response.statusCode).toBe(403);
+        expect(response.headers['content-type']).not.toContain('text/event-stream');
+      }
+      const mixed = await context.app.inject({
+        method: 'POST',
+        url: '/api/v1/books/bulk-set-metadata',
+        headers: authHeader(caller.accessToken),
+        payload: { bookIds, field: 'publisher', value: 'Forbidden publisher' },
+      });
+      expect(mixed.statusCode).toBe(403);
+      for (const bookId of bookIds) {
+        const metadata = await context.db.query.bookMetadata.findFirst({ where: eq(schema.bookMetadata.bookId, bookId) });
+        expect(metadata?.publisher).toBe('Original publisher');
+      }
+      for (const level of ['editor', 'owner'] as const) {
+        await grantLibraryAccess(context, caller.userId, viewer.libraryId, level);
+        const rename = await context.app.inject({
+          method: 'POST',
+          url: `/api/v1/books/${bookIds[1]}/rename-files`,
+          headers: authHeader(caller.accessToken),
+        });
+        expect(rename.statusCode).toBe(204);
+        const response = await context.app.inject({
+          method: 'PATCH',
+          url: `/api/v1/books/${bookIds[1]}/metadata-and-locks`,
+          headers: authHeader(caller.accessToken),
+          payload: { metadata: { title: `Allowed ${level}` }, lockedFields: [] },
+        });
+        expect(response.statusCode).toBe(200);
+        const metadata = await context.db.query.bookMetadata.findFirst({ where: eq(schema.bookMetadata.bookId, bookIds[1]) });
+        expect(metadata?.title).toBe(`Allowed ${level}`);
+      }
+      await grantLibraryAccess(context, caller.userId, viewer.libraryId, 'viewer');
+      const downgraded = await context.app.inject({
+        method: 'PATCH',
+        url: `/api/v1/books/${bookIds[1]}/metadata`,
+        headers: authHeader(caller.accessToken),
+        payload: { title: 'Forbidden after downgrade' },
+      });
+      expect(downgraded.statusCode).toBe(403);
+      const renameAfterDowngrade = await context.app.inject({
+        method: 'POST',
+        url: `/api/v1/books/${bookIds[1]}/rename-files`,
+        headers: authHeader(caller.accessToken),
+      });
+      expect(renameAfterDowngrade.statusCode).toBe(403);
+      const readable = await context.app.inject({ method: 'GET', url: `/api/v1/books/${bookIds[1]}`, headers: authHeader(caller.accessToken) });
+      expect(readable.statusCode).toBe(200);
+      expect(readable.json().title).toBe('Allowed owner');
+    });
+
     it('enforces permission and library access for PATCH /books/:id/metadata', async () => {
       const library = await createLibraryWithFolder(context, { mode: 'book_per_file' });
       await createPdfFixture(library.folderPath, 'access/patch.pdf');
diff --git a/server/test/users-admin-lifecycle.e2e-spec.ts b/server/test/users-admin-lifecycle.e2e-spec.ts
index 00f8ae247..8d6104f6d 100644
--- a/server/test/users-admin-lifecycle.e2e-spec.ts
+++ b/server/test/users-admin-lifecycle.e2e-spec.ts
@@ -295,6 +295,20 @@ describe('Users admin lifecycle (e2e)', { timeout: 180_000 }, () => {
       });
       expectError(invalidPermissionUpdate, 400, 'permissionNames');
 
+      await ctx.db
+        .update(schema.userLibraryAccess)
+        .set({ accessLevel: 'editor' })
+        .where(and(eq(schema.userLibraryAccess.userId, created.id), eq(schema.userLibraryAccess.libraryId, libraryA.libraryId)));
+      const readAccessLevels = async () =>
+        Object.fromEntries(
+          (
+            await ctx.db
+              .select({ libraryId: schema.userLibraryAccess.libraryId, accessLevel: schema.userLibraryAccess.accessLevel })
+              .from(schema.userLibraryAccess)
+              .where(eq(schema.userLibraryAccess.userId, created.id))
+          ).map((row) => [row.libraryId, row.accessLevel]),
+        );
+
       const libraryUpdate = await ctx.app.inject({
         method: 'PUT',
         url: `/api/v1/users/${created.id}/libraries`,
@@ -314,6 +328,25 @@ describe('Users admin lifecycle (e2e)', { timeout: 180_000 }, () => {
       expect((readLibrariesAfterUpdate.json() as number[]).toSorted((a, b) => a - b)).toEqual(
         [libraryA.libraryId, libraryB.libraryId].toSorted((a, b) => a - b),
       );
+      expect(await readAccessLevels()).toEqual({ [libraryA.libraryId]: 'editor', [libraryB.libraryId]: 'viewer' });
+
+      const narrowedLibraryUpdate = await ctx.app.inject({
+        method: 'PUT',
+        url: `/api/v1/users/${created.id}/libraries`,
+        headers: authHeader(manageUsersAdmin.accessToken),
+        payload: { libraryIds: [libraryA.libraryId] },
+      });
+      expect(narrowedLibraryUpdate.statusCode).toBe(204);
+      expect(await readAccessLevels()).toEqual({ [libraryA.libraryId]: 'editor' });
+
+      const restoredLibraryUpdate = await ctx.app.inject({
+        method: 'PUT',
+        url: `/api/v1/users/${created.id}/libraries`,
+        headers: authHeader(manageUsersAdmin.accessToken),
+        payload: { libraryIds: [libraryA.libraryId, libraryB.libraryId] },
+      });
+      expect(restoredLibraryUpdate.statusCode).toBe(204);
+      expect(await readAccessLevels()).toEqual({ [libraryA.libraryId]: 'editor', [libraryB.libraryId]: 'viewer' });
 
       const deleteResponse = await ctx.app.inject({
         method: 'DELETE',