permission problems when sharing only music

[Painkiller88 250]

hi,

 

when i wanna share only music to a user on my server, he also sees the "Collections" section in the main menu but no entries if he enter the collections.

 

I haven't found a way to hide the collection section for this user.

This should be improved. Also the users are still able to add songs to existing playlists and delete playlists completely or single songs, so i also can't share my playlists with him because i wanna prevent he is deleting my songs/playlist.

 

Improvement is needed here also.

 

thanks

[GrimReaper 4761]

18 minutes ago, Painkiller8818 said:

I haven't found a way to hide the collection section for this user.

Go to Dashboard>Users, select desired user, click "Edit this user's profile...", select 'Home Screen', untick "Display on home screen" under Collections.

[Painkiller88 250]

1 minute ago, GrimReaper76 said:

Go to Dashboard>Users, select desired user, click "Edit this user's profile...", select 'Home Screen', untick "Display on home screen" under Collections.

This is a client based setting, if i disable this in my browser it is stil there if the user logs into his own device.

There needs to be a serverside setting to deactivate this as there also isn't no setting to allow to see or don't see the collections.

You can disable playlists but collections is not available in the users settings.

[GrimReaper 4761]

3 minutes ago, Painkiller8818 said:

This is a client based setting, if i disable this in my browser it is stil there if the user logs into his own device.

There needs to be a serverside setting to deactivate this as there also isn't no setting to allow to see or don't see the collections.

That is server side setting, it will affect that user when he logs on.

Edit: Or to clarify, it is client setting which you as an admin will do server-side.

Edited July 7, 2021 by GrimReaper76

[Painkiller88 250]

2 minutes ago, Painkiller8818 said:

This is a client based setting, if i disable this in my browser it is stil there if the user logs into his own device.

There needs to be a serverside setting to deactivate this as there also isn't no setting to allow to see or don't see the collections.

You can disable playlists but collections is not available in the users settings.

ok perfect, i thought it is a user/cookie based setting. thanks.

[acnp77 67]

Even if I do not give a user access to my playlists, and also have unchecked "allow media deletion from" a user still can access the playlists from the side menu. He can also add or delete items or an entire playlist. We need an option to prevent this. I think permissions need to be reworked here. Reproduction of the bug should be very simple.

@Luke this must be considered a bug and needs fixing.

 

Emby

 

[Luke 42085]

Hi, we plan to revamp playlist permissions in future updates. thanks.

[Painkiller88 250]

Hi, received 2 new server updates but permission revamps are still not done.

Isn't this important enought as i think it is a kind of security issue?

 

thanks

[GrimReaper 4761]

7 minutes ago, Painkiller8818 said:

Hi, received 2 new server updates but permission revamps are still not done.

Isn't this important enought as i think it is a kind of security issue?

Long topic regarding that:

 

[Painkiller88 250]

Not exactly the same.

Can we implement a deletion prevention? So non Admins can't delete Playlists and Collections..

 

This

[Luke 42085]

Just now, Painkiller8818 said:

Not exactly the same.

Can we implement a deletion prevention? So non Admins can't delete Playlists and Collections..

 

This

Non admins can't delete collections.

[Painkiller88 250]

3 minutes ago, Luke said:

Non admins can't delete collections.

So why can they delete playlists? This really should be fixed.

[Luke 42085]

Playlist permissions will be revamped in an upcoming update. Thanks for the feedback.