User library access bug in v4. 8

[kaledi 41]

Think I've found a bug. I use user access to control which folders a user has access to with a library. Although the user profile settings show this to be correct, in practice through the client the user has full access to all folders in a libabry. 

[Luke 42078]

HI, yes we are looking into this. Thanks.

[earratia14 12]

I'd like to report the same problem. In the example shown by the attached screenshot, the user correctly cannot see anything under "Movies" (the option doesn't even appear). But they can see everything under "TV Shows", not just the content in folder "TV Shows G".

[Luke 42078]

@earratia14where can they see everything? In the normal library view? Or is it just isolated to one place?

[ng4ever 40]

4 hours ago, kaledi said:

Think I've found a bug. I use user access to control which folders a user has access to with a library. Although the user profile settings show this to be correct, in practice through the client the user has full access to all folders in a libabry. 

 

Same issue

 

 

[earratia14 12]

2 hours ago, Luke said:

@earratia14where can they see everything? In the normal library view? Or is it just isolated to one place?

Normal library view. From the main Emby client (tested both using Chrome on Windows and Emby app on Android), click on "TV Shows" (which is the name of the library), every entry is displayed and playable, even the ones in directories not allowed for the user.

[Luke 42078]

11 minutes ago, earratia14 said:

Normal library view. From the main Emby client (tested both using Chrome on Windows and Emby app on Android), click on "TV Shows" (which is the name of the library), every entry is displayed and playable, even the ones in directories not allowed for the user.

Is that user seeing the Movies library?

[earratia14 12]

7 hours ago, Luke said:

Is that user seeing the Movies library?

In the example of the Library Access screenshot: no, the user does not see the Movies library.

Now, if I click on "E:\Video\Movies\Movies G" and then Save, they see all movies regardless of the folder they are in (so they see Movies A and Movies P too).

[Luke 42078]

OK so is it safe to say that when the entire library is visible or hidden, that those are behaving correctly?

[earratia14 12]

1 hour ago, Luke said:

OK so is it safe to say that when the entire library is visible or hidden, that those are behaving correctly?

Yes, this works correctly:

 

this does not:

[kaledi 41]

OK, this is getting more intriguing.  Looking at this tonight, it appears that some media correctly show the correct access, but other media doesn't - and I mean from the same library.  It may be media that has been most recently added, but need to check some more to see if there is a clear pattern

[ng4ever 40]

Fixed thanks!

[Luke 42078]

Just now, ng4ever said:

Fixed thanks!

What do you mean?

[Luke 42078]

By what?

[Nisten 15]

Also experiencing this issue/bug; I have a user that has granular library access to Cartoons, Movies, & TV Shows but it's no longer working (user has access to the entire libraries)

User still has access to de-selected libraries when they shouldn't; For now I have to completely disable library access at the root levels in order to ensure they don't have access to stuff they shouldn't

Edited February 5, 2024 by Nisten

[earratia14 12]

4 minutes ago, kaledi said:

it appears that some media correctly show the correct access, but other media doesn't

I don't think this is accurate, at least not from what I am seeing. It looks like everything is shown or nothing is shown; limiting media by directory has no effect.

 

5 minutes ago, kaledi said:

It may be media that has been most recently added

Unfortunately no. Users without access to directory "A" are seeing everything under that directory.

[kaledi 41]

My observation is correct. Some media are showing multiple versions (which they shouldn't as the user shouldn't have access to folders with different versions), while some media is showing correctly. I can't find a pattern at this point 

[Luke 42078]

Is anyone able to try the 4.9 beta that went up today? If it resolves the issue then we can backport the changes into a 4.8.1 release. Thanks.

[earratia14 12]

Can't seem to get 4.9 beta installed. Is it already available for Windows?

[Happy2Play 9780]

3 minutes ago, earratia14 said:

Can't seem to get 4.9 beta installed. Is it already available for Windows?

Just asked in other topic and should be up for Windows it a few minutes.

[earratia14 12]

2 minutes ago, Happy2Play said:

Just asked in other topic and should be up for Windows it a few minutes.

Thanks, I just found the other topic. I'll follow it there.

[Luke 42078]

4 hours ago, earratia14 said:

Thanks, I just found the other topic. I'll follow it there.

Can you shutdown your server and send me a copy of your user.db and library.db files ?Thanks.

[Luke 42078]

If anyone here is experienced with running sql queries then I can give you one to run against the library.db file that I think will resolve it. If this is something that you're capable of then please let me know and I'll give you the query to run. Thanks.

[semioniy 4]

It was a lovely realization to learn that all my friends and family members I'm sharing access with could see (not access, but just see thumbnails) my playlists despite all of them having access set up as follows:
Let's say, I'm only using playlists for the bottom hidden library. And I assumed (hoped) that others wouldn't be able to even take a glimpse at it.

A part of a sidebar view they're greeted with:

Edited February 11, 2024 by semioniy
added another screenshot

[earratia14 12]

I recently found out users who do not have access to certain Music folders can still see the artist and artwork of every album on the server.

They cannot play the records though.