INTERACT FORUM

Please login or register.

Login with username, password and session length
Advanced search  
Pages: [1]   Go Down

Author Topic: User accounts bypass password  (Read 1649 times)

justsomeguy

  • Regular Member
  • Citizen of the Universe
  • *****
  • Posts: 525
User accounts bypass password
« on: December 26, 2013, 10:31:12 pm »
I was just playing around with the new user feature. I've noticed something:

in the current library I create a new user and give that user a password. I then switch from the admin account to this new user and it prompts for the password. I enter the password and things appear normal. Now in the new user, if I close MC and then start it again it starts up using this new user but does not prompt for the password. It would seem that it should prompt for the password during start up even if it was closed while using that account?
Logged

Matt

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 42372
  • Shoes gone again!
Re: User accounts bypass password
« Reply #1 on: December 27, 2013, 06:09:55 am »
This is by design, because requiring user input at program load would lead to problems.  Imagine enabling Media Server, but it not being able to load at boot because it's stuck needing a password.
Logged
Matt Ashland, JRiver Media Center

glynor

  • MC Beta Team
  • Citizen of the Universe
  • *****
  • Posts: 19608
Re: User accounts bypass password
« Reply #2 on: December 27, 2013, 06:40:12 am »
That's important and a reasonable default, Matt, but...

I can imagine a scenario (cough...porn...cough) where people might want to use the user setup to hide content and require a password to access it at all times.  Kids and whatnot.  Perhaps "Save Password" could be a per-user option somehow?
Logged
"Some cultures are defined by their relationship to cheese."

Visit me on the Interweb Thingie: http://glynor.com/

Matt

  • Administrator
  • Citizen of the Universe
  • *****
  • Posts: 42372
  • Shoes gone again!
Re: User accounts bypass password
« Reply #3 on: December 27, 2013, 06:48:33 am »
For now, switch out of the protected account when you're done.

At a future date, we may make this optional.  I agree it could be nice, but it's the sort of change that will have knock-on effects.  Remember the Hippocratic Oath of programming ;)
Logged
Matt Ashland, JRiver Media Center

6233638

  • Regular Member
  • Citizen of the Universe
  • *****
  • Posts: 5353
Re: User accounts bypass password
« Reply #4 on: December 27, 2013, 10:32:00 am »
Perhaps the way to handle this would be to have a preference that lets you select a "Default" user account that is used when MC is loaded, with "Prompt for Password" as an option for people that want to keep their library locked down completely?
Logged

justsomeguy

  • Regular Member
  • Citizen of the Universe
  • *****
  • Posts: 525
Re: User accounts bypass password
« Reply #5 on: December 27, 2013, 06:06:42 pm »
These sound like reasonable suggestions to me. I'm not trying to protect cough...porn...cough ;) but was just testing out the option to see if I could make use of it in some fashion. It just seemed a little pointless to have a password option with no real enforcement of it. Sounds like there may be future plans though so I'll wait to see how it progresses.
Logged
Pages: [1]   Go Up
« previous next »