User Specific Device Accesss Issues

[Happy2Play 9780]

9 minutes ago, Jrod696 said:

23 minutes ago, Happy2Play said:

Because the iphone is not making access, Safafi is.  So are you saying Safari does not show up?

correct, it is not in the device list

Minus errors in the server log it isn't possible.  If you see the device via the dashboard Active Devices, it is listed for users and Devices.

Edited June 28, 2021 by Happy2Play

[Jrod696 28]

I have deleted all devices from the dashboard so the only device listed is my browser and my firestick, I went into all users and selected grant access to all devices and saved, rebooted the server then went back to the one user with the iphone gave him access to only the firestick and hit save and rebooted, i have texted him to try and login from his phone and am waiting to hear back but I feel like i cannot reset anything anymore than that without doing a fresh install of the server which I for sure do not want to do.

based on this logic he should not be able to login with his phone on anything correct?

Edited June 29, 2021 by Jrod696

[Jrod696 28]

10 minutes ago, Jrod696 said:

I have deleted all devices from the dashboard so the only device listed is my browser and my firestick, I went into all users and selected grant access to all devices and saved, rebooted the server then went back to the one user with the iphone gave him access to only the firestick and hit save and rebooted, i have texted him to try and login from his phone and am waiting to hear back but I feel like i cannot reset anything anymore than that without doing a fresh install of the server which I for sure do not want to do.

based on this logic he should not be able to login with his phone on anything correct?

ok so it let him log right in with the only boxed checked was my nvidia shield, however it did show up in devices this time when i refreshed

i also was on the phone with him when he did this and confirmed he was using the app icon on his phone not going through the safari browser

Its almost like if a new device appears it checks the list and says oh its not in the list i dont have anything that says yes or no and allow it to connect.

although i had him try to login again with it in the list unchecked and it still connected without issue so that theory doesnt hold much water.

 

Edited June 29, 2021 by Jrod696

[Carlo 4561]

Hi, is he/she logging directly in or using Emby Connect?
Asking so I can try a couple other tests to reproduce.

[Jrod696 28]

58 minutes ago, cayars said:

Hi, is he/she logging directly in or using Emby Connect?
Asking so I can try a couple other tests to reproduce.

They are both using Emby connect.

[Carlo 4561]

As a test to help narrow this down, could you have them try to log in directly to your server using the username/password you have setup on the server.

[Luke 42078]

@Jrod696 ?

[Jrod696 28]

54 minutes ago, Luke said:

@Jrod696 ?

I tried to contact the user but his schedule and my schedule dont exactly line up so i have not had a chance. I was going to try to replicate it myself with another device but I have not had a chance either, Late work nights and OT are not conducive to troubleshooting tbh.

[Jrod696 28]

1 hour ago, Luke said:

@Jrod696 ?

So I used the app on my phone and took my phone off wifi, my phone is not listed in the device list.

I used his account and password and it would not log me in using a direct connect, I checked the allow all devices and hit save and could access, unchecked it and could not.

The curious thing when I went to go in and add the device specific ( my cell) its not listed in the device list.

It appears though that aside from the device recognition storage it does work properly as far as access is concerned when direct connecting.

[Luke 42078]

Thanks for the feedback. Have your questions been answered?

[Jrod696 28]

17 minutes ago, Luke said:

Thanks for the feedback. Have your questions been answered?

I am still interested in trying to find out if there is a settings issue or a way to fix the issue so that devices actually show up in the dashboard and to be sure that users with specific access set by device can only access with that device or devices that are selected, currently that is not the case.

If the issues is my end how can I fix it?

[Happy2Play 9780]

12 minutes ago, Luke said:

Thanks for the feedback. Have your questions been answered?

I think the issue still remains as remote user is circumventing the access via Connect via browser not native app.  As Remove user should be blocked per this setting.  But have not been able to reproduce this.

On 6/28/2021 at 7:27 PM, Jrod696 said:

i also was on the phone with him when he did this and confirmed he was using the app icon on his phone not going through the safari browser

Not entirely sure what this is suppose to mean as it clearly shows a browser connection.

 

[Happy2Play 9780]

@LukeI sort of see a issue as the Safari iOS is only shown as a device when the user is logged on and removed when logged off.  Same via Devices, something auto remove Safari iOS from Devices.

Logged in

Logged off

But reappears at login. 

Now if I apply restriction to that device while logged in, the restriction will apply once user logs off.  Logging in again is restricted in my test.

 

 

[Jrod696 28]

4 minutes ago, Happy2Play said:

@LukeI sort of see a issue as the Safari iOS is only shown as a device when the user is logged on and removed when logged off.  Same via Devices, something auto remove Safari iOS from Devices.

Logged in

Logged off

But reappears at login. 

Now if I apply restriction to that device while logged in, the restriction will apply once user logs off.  Logging in again is restricted in my test.

 

 

in my test i show myself logged in using my android device using the app and it still does not show in devices.

he used the installed app on his phone he did not use safari, I dont know if its the age of the iphone i dont know, i dont even have apple devices, but even if hes a complete idiot and doesnt understand the green icon vs the safari icon is still not a security violation that a browser can login to the server when the only device he should be able to use is 1 single fire stick.

Edited July 1, 2021 by Jrod696

[Happy2Play 9780]

1 minute ago, Jrod696 said:

he used the installed app on his phone he did not use safari,

I am not sure then as the app will/should show this 

and Safari will/should show this, with different version number of course

  But my testing appears to provide different results then yours though.

[Jrod696 28]

27 minutes ago, Happy2Play said:

I am not sure then as the app will/should show this 

and Safari will/should show this, with different version number of course

  But my testing appears to provide different results then yours though.

I am willing to admit he may not be the sharpest tool in the shed but issue still exists of users being able to login when they shouldn't be able to.

And Devices are not showing up and or staying in the Device list. My personal phone that I used the android app on today does not show in the device list either in the dashboard or in the user access devices