About the privilege of Download & Sync

[cchsieh 8]

I tested the function of Download & Sync recently. And found that when I enable this option of some user, he will see all other users's devices and sync to the deivce that doesn't belong to him. It seems strange. Any further control to limit the devices to sync?

 

And could you seperate the option "Download & Sync" to two options? 

 

 

 

 

[Luke 42078]

Users see all devices they have access to based on device access settings.

[cchsieh 8]

I see now. Thanks.

Emby server is running serveral years and there are too many devices on the list. Maybe new devices, maybe re-intsall devices, maybe chrome client from any computers ...... I have to un-select "Enable access from all devices" and then un-select all the devices about 150 devices in the list and then select what I want. Could you provide a better UI to sort out the devices list? 

 

When the option "Enable access from all devices" is selected and the option "Allow remote control of other users" & "Allow remote control of shared devices" are un-selected, the user only can access the device of his own account. But the sync list will see all the deivces including other users. The behavior is strange, I think.

Edited October 9, 2018 by cchsieh

[Luke 42078]

It's possible for the future. Thanks.

[cchsieh 8]

Sorry I modified. And added the following.

When the option "Enable access from all devices" is selected and the option "Allow remote control of other users" & "Allow remote control of shared devices" are un-selected, the user only can access the device of his own account. But the sync list will see all the deivces including other users. The behavior is strange, I think.

[saitoh183 137]

I also agree that Download and sync should be 2 separate options. I dont want my users to be able to download files but i want them to be able to sync file to there device. Currently, you cant have one without having the other. 

[Luke 42078]

In emby download and sync are the same thing. The sync feature is just a download feature with a menu. That is why they use the same permission.

[saitoh183 137]

In emby download and sync are the same thing. The sync feature is just a download feature with a menu. That is why they use the same permission.

Ah I see, but you understand that when people see download, they will think, hey I will just grab the file and use it in oppose to sync which makes them use it via the mobile device. I know not everyone is tech savvy, so it is even more reason not to show download so people don't get it confused especially since Sync option is hidden in a sub menu and download is not. I still think they should be separate things just to avoid confusion among the less techy people.

 

Sent from my CLT-L04 using Tapatalk

[Luke 42078]

 

 

 I will just grab the file and use it in oppose to sync 

 

Not exactly because in the apps that support sync, the regular download function is not there.

 

There is still the same download button, but when you click it, it opens the sync menu. So that's what I mean about them being the same. In the end, you're just downloading.

[Carlo 4561]

Users see all devices they have access to based on device access settings.

Not really.  The user will see devices they should not have access to as well.

For example Sue does not know Bob.

 

You share your server with both Sue and Bob and both have sync privs.

Bob can setup a sync to Sue's devices and vice versa which is a security breach.

 

A user (admin aside) should ONLY be able to setup a sync job to a device they have logged in on, period.

[Luke 42078]

You can configure device access so that those users cannot see each other's devices.

[Luke 42078]

Hi, this will be revamped in Emby Server 4.6. It will follow the user's remote control permissions. If they don't have permission to control other user's devices, then they won't be able to download to them either. Thanks for the feedback.

[Jinhjy 2]

On 1/15/2021 at 9:09 PM, Luke said:

Hi, this will be revamped in Emby Server 4.6. It will follow the user's remote control permissions. If they don't have permission to control other user's devices, then they won't be able to download to them either. Thanks for the feedback.

This is great news! Thanks Luke and Team