Emby connect users getting all access pass

[darkassassin07 653]

So, I cant really provide logs because I have no idea when the actual change happened but,

Twice now I have had the only user on my emby server that was added via the 'invite with emby connect' button have the users 'access' settings reset to default meaning he has unrestricted access to all libraries, devices and channels. None of the other settings for his user have changed, only the settings under 'access'.

The first time I thought maybe I messed up the settings when I created the user, but after double and triple checking it was correct the last time I fixed it, I just found it reset again.

 

 

[Happy2Play 9785]

Only way this should be possible is if you gave the user "Allow this user to manage the server" access.

[Luke 42085]

It sounds like they just have access to all libraries. You can control this via the Emby Server dashboard by editing the user permissions.

[darkassassin07 653]

Neither of those are true. The user only had access to a select number of libraries. As I said I triple checked this after it was reset to access all the first time. The user does not and has never had permission to manage the server. For some unknown reason this user has been given access to all libraries twice after having it setup to only access some libraries. I checked this several times and don't have any problems with any other users now or ever. This only happens with this user who is the only one invited via emby connect I don't know why or when this user has been given access to all libraries but I am the only user with admin privileges and have not done it myself.

Edited November 23, 2018 by darkassassin07

[Luke 42085]

when was it reset?

[darkassassin07 653]

So, I cant really provide logs because I have no idea when the actual change happened

It's been several months since I looked at this users settings. He confirmed he has had access for 'a while' but I don't know any more detail than that. Can't be any longer than say 4 months? But It could have been last week. This user is a pretty unreliable source unfortunately

Edited November 23, 2018 by darkassassin07

[Luke 42085]

Ok then unfortunately all we can really do is guess at what might have happened way back when. It could have been a defect with an older server version. If you can catch it again closer to when it happens, then we can investigate. But i have not seen anyone else report this. Thanks.

[darkassassin07 653]

I'll try and keep an eye on it. Sry I can't provide any more useful information, it was just a little concerning to find this user with access to some more personal media... :/

Edited November 23, 2018 by darkassassin07