"friend"/user can still access my PMS and watch content after being deleted?!

@RyanDungeyMX said:

If you are so good, and sysadmin by trade, why are you using a working host address as representation of a full /24 class network when allowing this network in plex, and not the network ID?.

Why even allow local lan? Its already allowed?. Why allow only 1.1?, any chance 1.1 might be your gateway?

So much weird stuff, and you act so aggressive

@RyanDungeyMX

Dude, I obviously know that should be “192.168.1.0/255.255.255.0” That’s a typo from the screenshot as I was masking IP addresses. It was an example of what I have for my settings.

Look man, when you launch your plex app on your device (when remote) you authenticate with PLEX. There’s NO reason or method he should be allowed on my server if he’s not on my friends list or on my LAN.

I tested it twice today with different users and they were not able to access my server.

Here we go again:

It’s really not a complicated process:

  1. User launches PLEX app →
  2. App authenticates with PLEX.tv (since user is remote) →
  3. server list is generated (this where my server would drop off his app since I removed him)
    a. If user has settings in the app for direct access and is on same LAN as PMS user is granted access.
    b. If user has settings in the app for direct access and is remote, user would obviously be denied access.

@seanvree81 said:

I tested this with another user today as well. I added him, had him watch some stuff. Then deleted him, and rebooted the PMS, He was NOT able to watch anything, nor did my server even show up on his server list.

Also, I used a DB explorer to look at the tables inside the PLEX db, and saw two instances of his username. I removed them. I have no way of testing if this worked, but I SUSPECT that was the issue.

Again, the reverse proxy is NOT the issue here. This is a PLEX authentication problem.

Ok, if the database still held his user, then yes its sounds like he did not successfully get purged from your user list.

That could be the problem, not so much access issue (a symptom), but a ‘removed’ user that still stuck in the database (the probable cause), but not provided any visual info problem (the reason it was not obvious).

Really it is enough with the back and forth on the forum, simply patiently wait and monitor your server to see if he ever can access it again.

I ran into the same issue. I removed the user, yet the person could still access and watch from my server.

Turns out, there are TWO methods to give someone access to your server. As a user under your account or as a friend that accesses your server via their account.

In my situation the person was added as a friend as well as a user. Simply deleting the user didn’t prevent them from accessing my server until I removed them as a friend as well. Check if the person you’re trying to remove is a user and/or a friend.

I just ran into this same issue myself. I removed my friend months ago by deleting him from the ‘Sharing’ section under ‘Family & Friends’ However he just asked me to remove him again because his kids were streaming off of my server and sending him over his data cap. I checked and he isn’t even listed as a user under any screens I can find. However I am running PlexPy (Tautulli) and I certainly see his user had activity on my server. He also sent me a screenshot where he can still browse all my libraries. I then tried to re-invite him to just give him access to one fake section. However it says I am already sharing with him and I need to edit that instead. I also checked the authorized devices and I can’t find anything that looks like his Fire TV on there. This is on Plex 1.15.6.1079 running on Ubuntu and I have had this setup running for years. I guess I will have to try browsing the DB to see if there are pieces of his user left behind unless anyone has an updated suggestion before I do that.

You sure your friend wasn’t added to the “Home User” section aswell as “Sharing” section?

I checked in both sections they are not listed in either section from the web based interface at least when I log into plex.tv