computerprep 143 Posted October 15, 2018 Share Posted October 15, 2018 I don't know how long it's worked this way, but I've recently realized that if I allow users to download & sync, they are allowed to do so to any device even if it belongs to another user. Is there some setting I'm just not seeing that will allow downloading and/or syncing, but only to that user's devices? Maybe splitting downloading permissions from syncing permissions will let someone download to the device they're using but not to any other device whether it's theirs or not. For now, I've had to disallow all downloading and syncing, which is causing a bit of a headache. Link to comment Share on other sites More sharing options...
Luke 37246 Posted October 15, 2018 Share Posted October 15, 2018 They're able to sync to all devices they've been granted access to based on device access settings. Link to comment Share on other sites More sharing options...
Carlo 4331 Posted October 16, 2018 Share Posted October 16, 2018 But should Harry be able to sync to Bob's phone when Harry doesn't even know Bob let alone ever logged in on his device? Link to comment Share on other sites More sharing options...
Spaceboy 2504 Posted October 16, 2018 Share Posted October 16, 2018 But should Harry be able to sync to Bob's phone when Harry doesn't even know Bob let alone ever logged in on his device?surely the server admin has to decide that. Unless emby has an understanding of what are likely to be shared devices or not Link to comment Share on other sites More sharing options...
computerprep 143 Posted October 17, 2018 Author Share Posted October 17, 2018 (edited) Edited October 17, 2018 by computerprep Link to comment Share on other sites More sharing options...
Carlo 4331 Posted October 17, 2018 Share Posted October 17, 2018 surely the server admin has to decide that. Unless emby has an understanding of what are likely to be shared devices or not I'd say "absolutely not". I do not want MS, Netflix, Hulu deciding who can access my device just because I login into their service. Simply put if a device has never been logged in with said username that person has no authentication on said device and can't touch it. Non admin users should only be able to see, sync or manage a device they have authenticated on, period. Otherwise this is a major security issue! Link to comment Share on other sites More sharing options...
computerprep 143 Posted October 17, 2018 Author Share Posted October 17, 2018 Or split the permissions to download vs sync. So users can only download or set automatic download rules on the device they're currently using. That would address @@cayars responses too. Link to comment Share on other sites More sharing options...
computerprep 143 Posted November 3, 2018 Author Share Posted November 3, 2018 So @@Luke, I've taken your suggestion of strictly allowing access to certain devices per user. Now someone just bought a new Roku. They can't sign in on that device because I haven't allowed it, but I can't allow it because it's not in the dashboard's devices list because it hasn't signed in by anyone yet. Are we stuck in this loop unless I temporarily allow them access to all devices? Link to comment Share on other sites More sharing options...
Luke 37246 Posted November 3, 2018 Share Posted November 3, 2018 Unfortunately the device access feature is not as user friendly as it ought to be at this stage. Link to comment Share on other sites More sharing options...
computerprep 143 Posted November 3, 2018 Author Share Posted November 3, 2018 Ok. Just making sure I wasn't missing something. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now