More secure user defaults #98

Closed
opened 2026-02-06 19:17:52 +03:00 by OVERLORD · 5 comments
Owner

Originally created by @dragon2611 on GitHub (Dec 15, 2018).

The default setting when a user is created is for them to be shown on the login screen, have no password and be able to remotely access the server.

Whilst I'm pretty sure this has come from Emby it is is horrible from a security perspective, especially for servers where remote access is enabled. I'd like to be able to change the settings so creating a user requires a password to be created and by default they're hidden from the login screen.

Originally created by @dragon2611 on GitHub (Dec 15, 2018). The default setting when a user is created is for them to be shown on the login screen, have no password and be able to remotely access the server. Whilst I'm pretty sure this has come from Emby it is is horrible from a security perspective, especially for servers where remote access is enabled. I'd like to be able to change the settings so creating a user requires a password to be created and by default they're hidden from the login screen.
OVERLORD added the enhancementgood first issue labels 2026-02-06 19:17:52 +03:00
Author
Owner

@bobberb commented on GitHub (Dec 15, 2018):

c.f. #79

@bobberb commented on GitHub (Dec 15, 2018): c.f. #79
Author
Owner

@JustAMan commented on GitHub (Mar 30, 2019):

@joshuaboniface why did you close this?..

@JustAMan commented on GitHub (Mar 30, 2019): @joshuaboniface why did you close this?..
Author
Owner

@cvium commented on GitHub (Mar 30, 2019):

He didn't. GitHub did

@cvium commented on GitHub (Mar 30, 2019): He didn't. GitHub did
Author
Owner

@TiraelSedai commented on GitHub (Dec 23, 2019):

The default setting when a user is created is for them to be shown on the login screen, have no password and be able to remotely access the server.

Right now user is hidden by default from the login screen. Should the issue be closed @JustAMan ?

@TiraelSedai commented on GitHub (Dec 23, 2019): > The default setting when a user is created is for them to be shown on the login screen, have no password and be able to remotely access the server. Right now user is hidden by default from the login screen. Should the issue be closed @JustAMan ?
Author
Owner

@JustAMan commented on GitHub (Jan 10, 2020):

Probably yes.

@JustAMan commented on GitHub (Jan 10, 2020): Probably yes.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/jellyfin#98