Is there option I can put in /etc/default/plexmediaserver to prevent the “Allow media deletion” option to ever be enabled. If Plex.tv, the server, or any number of factors that allow someone to take over an account occurs, I want to make sure the worst that can happen is they delete data in Plex itself.
Two factor auth for Plex.tv should also be implemented.
What I did was to make Plex access to the media read only…
The media is owned by another user and Plex has only read rights to it.
I have the Allow media deletion enabled but it just removes the item in question from the database.
That is what I originally tried a couple of years ago. But for some reason, some media would not show up unless there was write access to library. I’ll try it again as a precaution.
Thanks Chuck. I’ve gone ahead and locked down the perms like you mentioned and it was what I did in the past. I still don’t know why Plex wouldn’t recognize new media unless it had write access sometime middle of last year. I was pulling my hair out doing the Plex Dance and anything else I could think of to get it to recognize the new media. Only by giving it write access did it see the new media. I saw that someone else had that problem as well, though don’t ask me to go find that thread.
I guess I should have said thank you to both you and Chuck. Yea, I used to run that configuration just like you had said for years. But then I hit that weird bug. Everything seems to be working fine now though. So I’m pleased that the Plex user cannot do anything to the media. Even though I have ZFS snapshots and I could rollback if necessary. Still, you won’t ever want something like that to happen.
I deliberately setup Plex to run as its own, unprivileged, user account for precisely the reason requested: It cannot do anything unless expressly granted - which includes changing media.
If a customization was performed to change the default user then the fault is not PMS but the customization.