Application permission for folders to scan

Plex Media Server NAS & Devices
1

Hello,

I just installed Plex Media Server on my QNAP and started to create my libraries of media. It’s just fine, it works great ! Thank you developpers !
But I just see that the server is able to scan media in each volume of my nas without any restriction. So I was wondering if it’s possible to restrict access to only one volume “My media Volume”.
I think it could be a security problem, because if I lose my Plex password, the bad guy will be able to access to the full volumes, folders and files of my Nas without restriction through the Plex Scan library system.

So tell me if I have right to be worried about that :slight_smile:
Thanks for reading,
Kind regards,

Val

1 Like
2

All addon’s on a QNAP runs as what on Linux is called root, meaning your admin user.

This is not a “problem” specific to Plex, but the way that QNAP designed their system.

And yes, if somebody get’s their hands on your PMS password, as well as have access to the outside, then they can add a library that starts of the root of the file-system, and scan that. However, only known and supported media types will get into the library, and not any documents etc.

Supported file extensions for video is:
'3g2', '3gp', 'asf', 'asx', 'avc', 'avi', 'avs', 'bivx', 'bup', 'divx', 'dv', 'dvr-ms', 'evo', 'fli', 'flv', 'm2t', 'm2ts', 'm2v', 'm4v', 'mkv', 'mov', 'mp4', 'mpeg', 'mpg', 'mts', 'nsv', 'nuv', 'ogm', 'ogv', 'tp', 'pva', 'qt', 'rm', 'rmvb', 'sdp', 'svq3', 'strm', 'ts', 'ty', 'vdr', 'viv', 'vob', 'vp3', 'wmv', 'wpl', 'wtv', 'xsp', 'xvid', 'webm'

Audio:
'mp3', 'm4a', 'm4b', 'flac', 'aac', 'rm', 'rma', 'mpa', 'wav', 'wma', 'ogg', 'mp2', 'mka', 'ac3', 'dts', 'ape', 'mpc', 'mp+', 'mpp', 'shn', 'oga', 'aiff', 'aif', 'wv', 'dsf', 'dsd', 'opus'

Pictures:
'png','jpg','jpeg','bmp','gif','ico','tif','tiff','tga','pcx','dng','nef','cr2','crw','orf','arw','erf','3fr','dcr','x3f','mef','raf','mrw','pef','sr2', 'mpo', 'jps', 'rw2', 'jp2', 'j2k'

/T

3

I see that this is still the case two years later. I want to store family pictures and videos on my new QNAP NAS, but am concerned about plex’s ability to scan these files.

I have read that other NAS systems are enabling installing plex under non-admin accounts on the NAS and then limit file access that way. Hopefully QNAP at least ,has plans to enable this in the future. Obviously it is not Plex’s fualt.