Bug - Library Preview does not honor access rules

[Shadowdream 0]

I have noticed a bug that I would like to report for fixing.

To replicate it, all you need is a Library with at least two separate folders and an account that has access to only one of the two folders. The Preview on the Home Screen to that library will be auto-generated and be made from up to 4 images of that library that are sliced together.

Now the thing is that these 4 images are randomly picked and used for *every* user who has access to at least one folder in this library. This results in the situation that someone who is not supposed to have access to certain Library Folders, can randomly be given preview images from a blocked source.

My suggested solution is: User based Library Covers. Or some variation that will honor access rights.

(I know that I can place a custom image myself, but I think the point of access control is to have access control, right?)

[Happy2Play 9782]

This has come up before as dynamic images do not know user restrictions.  There is one global image per libraries/genres/tags/collections.

Otherwise requires static assigned images.

If Emby were to do anything it should generate images based off most restricted user.  Don't really agree with every user having something different.

[Shadowdream 0]

1 hour ago, Happy2Play said:

This has come up before as dynamic images do not know user restrictions.  There is one global image per libraries/genres/tags/collections.

Otherwise requires static assigned images.

Exactly what I have posted…

1 hour ago, Happy2Play said:

If Emby were to do anything it should generate images based off most restricted user.  Don't really agree with every user having something different.

In my particular situation, I have a library of the type Home Videos & Photos, filled with such content, split across a few folders, depending on participants / occasion. The thing is, that there is no ‚common folder‘ that everyone shares.

Just to stay on point, I made this report specifically because of unwanted Data Leakage. I know what I can do in this case, but other users are very likely not even aware of it (I only noticed it randomly). The default setup should handle access rights properly!

I will happily leave the decision about the best solution to the dev team, but I do ask to take privacy seriously! When someone has enough reason to deny certain access for certain users, it is not up to anyone else here to disagree and refuse that wish!

[Happy2Play 9782]

Not a buf as it is by design as a single library image for all users per category.  So your only choice is static images.  But with the recent topics on this it Emby I can see dynamic images just going away as they are not aware of Access or Parental control restrictions.

I do not agree with images per users either, but a personal preference as I manage my Libraries.

[Luke 42080]

HI, yes at some point we'll need to change these images to be unique per user.