User library access bug in v4. 8

[Luke 42078]

7 hours ago, earratia14 said:

I recently found out users who do not have access to certain Music folders can still see the artist and artwork of every album on the server.

They cannot play the records though.

Where can they see them?

[earratia14 12]

Under the Music library.
Album Artists: will show every artist in the collection, regardless of whether the user has access to the folders that contain albums by that artist

Albums: will also show every album in the collection, regardless of whether the user has access to the folders those albums are in

Users are able to click into those album artists and albums. The track list is empty, and if they try to play the album or hit the play button at the artist level, they'll get a message indicating that perhaps the folder is empty.

 

[earratia14 12]

8 hours ago, Luke said:

Where can they see them?

This used to work properly prior to recent updates.

In this particular user's example, they are not supposed to be able to see the first album (I highlighted it in a red box)

 

This other user is not supposed to be able to see any of the albums on the screenshot

 

 

 

 

[Nisten 15]

This seems to have been resolved a couple days ago because the library access seems to have reverted; did this get officially fixed in 4.8.1.0 ?

Edited February 21, 2024 by Nisten

[earratia14 12]

12 hours ago, Nisten said:

This seems to have been resolved a couple days ago because the library access seems to have reverted; did this get officially fixed in 4.8.1.0 ?

At least for me this does not appear to be fixed. My users are still seeing artists and album cover art that they don't have access to.

[Nisten 15]

44 minutes ago, earratia14 said:

At least for me this does not appear to be fixed. My users are still seeing artists and album cover art that they don't have access to.

My main gripe was TV & Movie library access for a single user but I just checked Music library access and it also seems to be resolved for the same user; However, I only have 1 other user besides me on a single server but the issue might be more complicated if you have a single server or multiple servers with multiple other users in general

[earratia14 12]

1 minute ago, Nisten said:

My main gripe was TV & Movie library access for a single user but I just checked Music library access and it also seems to be resolved for the same user; However, I only have 1 other user besides me on a single server but the issue might be more complicated if you have a single server or multiple servers with multiple other users in general

Right, my main gripe was also with TV & Movie libraries which do appear to be fixed.

In my case I have a single server with multiple users, they have different preferences as well as restrictions. For example, only one of my users likes and listens to music from Spanish, Mexican and other Latin American artists, so I don't want the Music library listing of the other users to show all that content. haha, another user has Atmospheric Ambient music albums which yet another found "downright creepy". (I'm not saying that it is, just that these folks have very different tastes as well as strong opinions! *grin*)
 

[earratia14 12]

@LukeI just made a fresh installation of Emby 4.8.1.0 on a test server. Only one library (Music) and 3 users (emby, embytest, embyXtest).
The library had 4 folders added:
Music A: contains a copy of the Invisible Touch album by Genesis
Music E: contains a copy of the Me Estoy Enamorando album by Alejandro Fernandez
Music G: contains a copy of Land of Forever and also River of Stars albums by 2002
Music P: contains a copy of the Exit 110 album by IIO

* User emby has access to everything

* User embytest has access to the library but only folders Music A and Music E

* User embyXtest has access to the library but only folder Music G

 

So embyXtest should only see the two albums by 2002, which are contained in Music G. But this is what they actually see:

 

They are able to play those two albums by 2002 just fine. But if they click on one of the other three, they get an error, which is good but I'd rather them not see the albums (or album artist) at all:

Edited February 21, 2024 by earratia14

[semioniy 4]

Any updates on the issue? It looks like RN if you wanna people not see smth on your media server, the way to do it is to spin up another instance of emby...