When one of my family opens a browser and hits the home plex server site (http://address:port/web/index.html) it drops them into a full, yet anonymous, user and gives them full access to everything (more or less). On our apps it does prompt for the PIN, just not in the web.
This isn’t external access, this is right here in the home. I’m running 1.8.0.4109 and I have the server set for Plex Home and i have managed users. DLNA is disabled and i do have my home network in the “list of IP addresses that allowed without auth” which should mean they still need a pin but not a plex account (right?).
I was certain this worked, it does on my Apple TV. That forces me to select a user and put in in a PIN. Why does the web client just let anyone (locally) in?
EDIT: when i look at the server log it says: “8:11am Unknown started playing…On Plex Web”
and i do have my home network in the “list of IP addresses that allowed without auth” which should mean they still need a pin but not a plex account (right?).
No, it means the server won’t request any type of authentication from clients in your home network.
Which amounts to “free access for everyone to everything”.
and i do have my home network in the “list of IP addresses that allowed without auth” which should mean they still need a pin but not a plex account (right?).
No, it means the server won’t request any type of authentication from clients in your home network.
Which amounts to “free access for everyone to everything”.
huh. so i dont think it worked that way previously. However, is there a way for my family (in the local network) to just be prompted for a managed user PIN and not a full Plex.tv account (which they do not have)?
I could have sworn this worked this way when I set it up originally.
Or does every home user family member need a full plex.tv account?
‘Managed users’ are some kind of sub-accounts of your own mrminus plex account.
So all managed users are still authenticating themselves against the server with a ‘real’ Plex account.
Then it sounds like I have to log into each device as my plex account and then switch the account to the less privileged managed user. That way they can’t switch back to my account without my PIN, and they are limited to their rights on my plex server.
@mrminus said:
Then it sounds like I have to log into each device as my plex account and then switch the account to the less privileged managed user. That way they can’t switch back to my account without my PIN, and they are limited to their rights on my plex server.
@mrminus said:
Then it sounds like I have to log into each device as my plex account and then switch the account to the less privileged managed user. That way they can’t switch back to my account without my PIN, and they are limited to their rights on my plex server.
Does this sound correct to you?
Yes, that’s exactly how it should go.
That seems to be the fix, thank you very much.
[soapbox]
Honestly I’m flummoxed as to why this is necessary. The user experience is really strange in that if I’m on my home network, hitting the sever from an internal address and I have managed users I would have expected it to give me the user list and pin prompt first. In addition perhaps give me “log in with Plex.tv account”.
Having to log into each client first with my high powered account, then swap to the low powered managed one is clunky.
