User access limitation not working

To Jo

Hi,

I'm trying to have 2 users on my TVHeadend instance. One should only be able to connect from my local network with admin and WebIf rights.

The other should be able to authenticate and stream von everywhere but without Admin and WebIf rights. Sounds simple but something is wrong that I don't understand.

Configuration --> Users:

See "one.png" attached

User "stream_user":
See "stream_user.png"

It doesn't matter if I enable "Web interface" or not. This user always has access to the configuration panel and can change things even when outside the local network. Why?

User "admin_user":
See "admin_user.png"

This user works as expected: I can only log in if I'm inside my local network and I see things and can change things.

My question: Why does user "stream_user" still have access to the Configuration pane and why does even unchecking "Web interface" not have any impact.

The order of the users don't matter as well...

I have no clue where my mistake is...

Thanks for your help. :-)

Version: Build: 4.3.0~pre+202303080213-0~built202303081146~git76a6263f1~ubuntu22.04.1 (2023-03-08T11:46:42+0000) --> but this doesn't matter, it was the same with an older version

Saen Acro

What client you use to watch?
Aka what protocol you use?

To Jo

Hi,

I'm using Kodi so HTSP Client. But everything with that and the "stream_user" works as expected. The only problem is that stream_user still has access to the configuration panel.

Thanks for you help! :-)

Saen Acro

Is this a official version or some cooked by unknown?

untick "web interface"

To Jo

Hi, thanks for your help.

Unticking "Web Interface" has no effect. stream_user can still access the WebIf.

The version is up to date from the Marley ppa mentioned on this site: https://tvheadend.org/projects/tvheadend/wiki/AptRepositories

So it's the latest nightly build.

But I've had the same behaviour with an older version (that's why I updated). Could also try to install it from the other ppa "Flole Systems repository on cloudsmith.io" but I don't think this would help...

Saen Acro

Then you have network problem.

Describe more how you connect.

To Jo

Hi,

TVHeadend runs on a Ubuntu Server in my apartment. From external (mobile phone without Wifi for example) I connect via a DynDns to my IP at home. The port is forwarded to my Ubuntu server.

admin_user can NOT connect from external like I want it to be, so this seems fine. admin_user can online connect when I'm in my local Wifi.

stream_user can connect from everywhere like I want it to be (from my mobile phone without Wifi) but it doesn't matter from where: stream_user sees the WebIf and the Configuration Tab which should not be the case.

So the network settings seem to be correct?

To Jo

UPDATE:
Solved it for myself. During installation (which was done like years ago for me...) you obviously setup a super user.

The password for this superuser is stored (in clear text??) in the file /home/hts/.hts/superuser

In my case the username was identical to the one I used in the Webinterface for my streaming account... this seems to mess up the settings or the super user wins which is why it simply didn't matter what I configured.

Saving it in clear text is weird and I didn't know about it.

I prefer the configuration without a superuser whose password is saved in clear text and deleted it. Now everything works as intended. :-)