Managed User should not be able to enable Sign in Automatically for the primary user

Server Version#: 1.23.0.4497 on Linux Mint
Player Version#: Roku, 6.7 build 26

I have Plex set up with 2 users, the primary user (my user), which has a PIN, and a Managed User for my daughter, which has no PIN. This week, I noticed on my Roku that my daughter was signed into my username. I investigated a bit, and I found that Plex on the Roku was no longer requiring a PIN when opening the app. I check out the settings and I found that “Sign in Automatically” was checked. I unchecked this and now Plex once again requires a PIN to log into my user account.

However, as I looked through the settings, I found that my daughter’s user account ALSO has access to this setting, and the setting is linked for both user names. So if my daughter enables the setting in her username it also enables it in my primary account. This is a Really Bad Design, and basically means that any time I log into my user on Roku, I need to check that setting to ensure it hasn’t been turned on, otherwise when I exit Plex anyone could just log into my username without the requisite PIN.

When I look on other Plex players (Android, Windows), the Managed User does not have access to this setting, which is how it should be. Am I missing something here? Is there any way to prevent a Managed User from having access to the “Sign in automatically” setting? Or is the PIN-based access restriction basically just crippled on Roku?

That setting means to reuse the same username as last logged in. For example, you use the app today and stop when you go to sleep. You use the app again the next day, it will not ask you to sign in or ask for the pin. If you however change to another user or go to the switch user menu before stopping for the day, it will still ask for a pin when you select a user.

There does appear to be a bug that this setting is available to the managed user. However, it should still request the pin when changing from the managed user to your admin account. It does in my test just now.

You are correct that it does ask for the PIN when switching. But if I don’t check every time I put the PIN in, then the Managed User could have changed the setting without me knowing it. It just makes no sense for the Managed User and the Primary User to have a shared preference for this setting. If they were separate then it wouldn’t be an issue.

That is a bug that the setting is showing for the managed user. I’ve already informed the team and a fix will be put in soon to hide that setting.

1 Like

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.