Hello,
Is allow media deletion a PlexPass only feature?
Right now 1.7 is a Plex Pass only download, so yes. But when 1.7 is available to the general pubic, the answer will be no.
OH GOOD!! I’m very glad the non-PlexPass members can be screwed too if their account is compromised… LOL!!
The allow media deletion feature isn’t new with 1.7. It has been around for a long time, and, as far as I know, available to all (admins only), not just Plex Pass. It has just been disabled until the admin turns it on.
The only change with regard to the delete feature in 1.7 is that, on fresh installs, the option will be enabled by default. In the past it was off. I can’t imagine what got into Plex’s heads to think this should be on by default, but that’s the change. See the release notes.
I know it has and I hated everything about it. I can’t imagine why the Plex dev team created the feature in the first place.
First off, I have never been a supporter of this option. I think its unsafe and irresponsible. But now, I straight up oppose it.
I know a few people might see it as a nifty option but it’s really not. It’s nothing more then an handy exploit.
This is a very serious security issue. I would even venture to say it could be a legal issue for Plex Inc.
Hear me out. While PMS is not, installing and using crappy software and it breaks your computer is one thing(kinda part of the every EULA). But to give someone else a way to damage your property is something else entirely.
Plex Inc, has created an exploit that can be used to delete files off someone’s computer.
We aren’t talking about some small thing here. The ability to delete files CAN be exploited and used maliciously.
And it wouldn’t take much. A simple username(or email address) and password. That’s the only protection you get.
So, as long as you don’t give out your login information then you will be okay… Your secret is safe with you, right? But wait. It gets better.
Correct me if I’m wrong, but wasn’t Plex compromised a year or two ago whereas the members were asked to create a new password?
OMG, that hack could have gone WAY different now. …You come home from work or vacation and voila! It’s gone. All of it. Deleted. Like magic…
Ah, link for the lazy-> http://lifehacker.com/plex-hacked-change-your-password-now-1715355825
I’m sure a lot of people here now have put a lot of time and effort into creating and maintaining an extensive library.
Even going all the way as to having big RAID setups with some redundancy in place to have that feel good comfort sensation. I bet it would make you go bat ■■■■ crazy if it was deleted?
PMS software was once designed to view media to now a software that deletes media.
I ask everyone here to push Plex Inc, to remove that option and help their customers protect their data.
TL;DR
I can show you a magic trick if I have your email and password.
Just one more stupid idea to add to the list of stupid ideas that keep coming out of Plex.
1.7 didn’t even honor my current setting of OFF and turned it on when I updated.
The whole delete option should be removed.
For the record, Plex was not hacked, the forums were, part of the reason they changed platforms. If you linked your forum account and Plex account, then you’d have an issue. Otherwise, you’d be fine. 
However, media deletion makes sense in some cases. Ever owned a TiVo? You can record AND delete recordings on TiVo. If you’re using Plex DVR, perhaps you might want to record and delete things from there too. I’m not saying that’s the only reason people might want to delete things, I’m sure there are many reasons some people don’t keep content, but if you’ve ever toggled it on and off, PMS will retain your setting. It’s important to remember that just because something isn’t the right option for you, doesn’t mean it’s not the right option for someone else.
When PMP launched, people requested the ability to delete media from within it, like they could on other clients. So clearly, for some people it is important. Everyone has a different set up, and many have different use cases.
@DaveBinM said:
For the record, Plex was not hacked, the forums were, part of the reason they changed platforms. If you linked your forum account and Plex account, then you’d have an issue.
Well, I was on that boat. Know matter how you look at it. If your username/password is compromised then you could loose every file.
@NewPlaza said:
@DaveBinM said:
For the record, Plex was not hacked, the forums were, part of the reason they changed platforms. If you linked your forum account and Plex account, then you’d have an issue.Well, I was on that boat. Know matter how you look at it. If your username/password is compromised then you could loose every file.
If only there were a way to turn it off…
@NewPlaza If people have your username and password, there’s not much you can do about it, other than change them. Plex did the right thing in alerting people, and making changes to try and mitigate this happening again.
You could also lose all your files if something fails, and you don’t have a backup in place as well. Nothing is infallible.
@DaveBinM said:
@NewPlaza If people have your username and password, there’s not much you can do about it, other than change them. Plex did the right thing in alerting people, and making changes to try and mitigate this happening again.You could also lose all your files if something fails, and you don’t have a backup in place as well. Nothing is infallible.
Yes… I know there is not much I could do about it. But at the very lease I could come here and cry to the admin/mods explaining my account was hacked… After what I guess days/weeks the issue would most likely be resolved and be up and running again.
Up until that feature was adding I had no…how to say, strong reservations about the possibility of a/another Plex site/Plex forum hack. What would I of lost. Not much… A few minutes setting up another account… Re-adding friends…
@NewPlaza You’re actually no more at risk now than you were before. If someone had your username and password, they could have logged in, gone to settings, enabled media deletion, and then gone to town. The only difference is that it’s enabled by default now. If you’re concerned about it, you can always disable media deletion Settings-->Library, which leaves you exactly how you were before 1.7.0
@DaveBinM
I already knew this but out of sight out of mind. But not my point at all.
Also, I sent you a private message regarding the placement of this post.
Well, that is your decision regarding moving this thread to the General Discussions (Public) section but I still feel like you should not punish the entire community for the actions of a few members. I was not the one to bring up a PlexPass only version. Not only that, the information and the existence of this new version is a matter of public record, available in the download area for everyone to see…
I mean, on that same logic, should all posts in the public section be moved if someone brings up a PlexPass feature?
But truly, I’m not trying to argue with you and hope I don’t come across that way. I simply want everyone to know this information. I mean… We have barely scratched the surface…
We haven’t even talked about the members that are giving their account login information to family & friends and such. And what about parents that allow their kids to watch content from their admin accounts, innocently. There is a level of ‘not much could go wrong’ or ‘nothing I can’t fix’. But is this really the case now? There are so many newcomers that just don’t know. And I not just talking about movies/shows. What about family photos. Something that some people may not have the knowhow or ability to make backups.
Granted, I want the feature remove but I’m not stupid. I know that’s not going to happen. It’s as simple as that. This post was never going to achieve that. BUT it does give valuable information.
Knowledge is power. Please don’t take that from the people.
@NewPlaza Thank you for your comments. Yes, knowledge is power. But keep in mind that this delete feature has been available for a long time. The setting has always been there for the admin to turn on/off. It is unlikely the feature as a whole would be removed.
We are reviewing the decision to enable the setting by default, but we had our reasons for doing so. If this is kept in the next public release of PMS, you are free to bring it up in the public section of the forum, but for now since it only affects Plex Pass members, the discussion should stay here.
We haven’t even talked about the members that are giving their account login information to family & friends and such. And what about parents that allow their kids to watch content from their admin accounts, innocently.
The admin should NEVER give their account information to others. Plex accounts are free to make for any user, or for Plex Pass members, they can setup Plex Home and have managed users. Forget about deleting content, with the admin credentials, a person could change the username, email, and password to the account. They can even delete the account entirely. There really isn’t a need to ever give out the admin credentials. Remember, with great powers come great responsibilities.
Also, deleting an item can only be done from PlexWeb. For kids or others who may not understand what they are doing, there are many other Plex client choices. Or if PlexWeb is the only choice, they can have their own account and switching to their user account should only take a few seconds. Or if you have Plex Home, it’s just a few clicks away.
@MovieFan.Plex said:
Also, deleting an item can only be done from PlexWeb.
I agree with everything you said, except that. If Delete is enabled on the server, the Admin can delete media from Roku, PMP, and Android, at least.
Hmm. You’re right. When did that happen. Last to find out again. 
@MovieFan.Plex said:
but for now since it only affects Plex Pass members, the discussion should stay here
Really? File deletion is only for PlexPass members?
If not, why should I have to regurgitate this information?
The admin should NEVER give their account information to others. Plex accounts are free to make for any user, or for Plex Pass members, they can setup Plex Home and have managed users. Forget about deleting content, with the admin credentials, a person could change the username, email, and password to the account. They can even delete the account entirely. There really isn’t a need to ever give out the admin credentials. Remember, with great powers come great responsibilities.
Absolutely Your account should not be given out but we don’t live in a perfect world. I mean it could be a living room computer setup for the family (server somewhere else).
@NewPlaza said:
@anon18523487 said:
but for now since it only affects Plex Pass members, the discussion should stay hereReally? File deletion is only for PlexPass members?
No. The “Allow deletion” option is available to all users, but for now, regular users have this off by default. The recent change which is what probably got your attention is only in the latest PP release of PMS.
If you want to have a discussion on whether this option should even exist, that’s a different topic and feel free to start a new one, even in the public forum.
I’m not sure if that was your intent when you started this topic. If so, it’s taken a bit of a turn. A new topic to clearly discuss pro/con of having a delete feature would probably be better.
That my friend, would be a waste of time. I can’t see my input removing a feature. It would take something like a legal issue brought against Plex where Plex lost.
In my posts I never commented on the default state of the option so I can’t see why you and your team is so hesitant on moving this to the public area.
I asked a very simple question and the answer was no, not PlexPass exclusive. So it will affect everyone.
