TVheadend web ui access only with admin
Added by Titus Kruse over 7 years ago
Hello,
I've installed TVheadend as Kodi add on with the setup guide in this forum. After setup I created two more access entries. One for access without authorization and one for access without admin credentials. For the second one I've added a password. Now I want to login to web ui with the second user. After entering user name and password I got HTTP error 401 (not authorized). And also I'm unable to access the web ui without credentials (first added user) because when I open TVheadend (port 9981), HTTP authentication will always came up.
I've checked my configuration multiple times. I don't understand why I can login with user tv_admin only.
Any ideas?
HTS Tvheadend 4.2.2-32 ~ LibreELEC Tvh-addon v8.1.111
LibreELEC 8.0.2
Raspberry PI 3
Thanks in advance!
Titus
Replies (8)
RE: TVheadend web ui access only with admin - Added by Titus Kruse over 7 years ago
Hi!
After complete new installation of LibreElec and TVheadend and hours of Google research, I've solved the problem on my own: A user must have the change parameters attribute "Rights" to be enabled to access web ui. Unfortunately this attribute is not documented on TVH wiki and github documentation repo.
Titus
RE: TVheadend web ui access only with admin - Added by Thomas Klein over 7 years ago
Titus,
you made my day! I was about to go mad with this.
I have been using 4.0.x versions for years and never had any issue setting up the access entries. Now with the 4.2 version, I couldn't get anything else than the admin account to connect.
(And yes, I went through the help contents a couple of times but couldn't get the picture! With your feedback in mind, now reading it again suddenly explains... )
Thanks again, Cheers,
Thomas
RE: TVheadend web ui access only with admin - Added by Mark Clarkstone over 7 years ago
Thomas Klein wrote:
Titus,
you made my day! I was about to go mad with this.
I have been using 4.0.x versions for years and never had any issue setting up the access entries. Now with the 4.2 version, I couldn't get anything else than the admin account to connect.(And yes, I went through the help contents a couple of times but couldn't get the picture! With your feedback in mind, now reading it again suddenly explains... )
Thanks again, Cheers,
Thomas
Sorry the help didn't explain "change parameter" better. I'll look into improving it in the docs.
<doc>
RE: TVheadend web ui access only with admin - Added by Jay Jayerson almost 7 years ago
I just came across the same problem/solution.
If I get it right, then there is no possibility to grant the default user access to the web interface except along with the "Rights" permission. But that also means that anybody can grant himself acess to anything. If that is correct, then it doesn't make sense at all to have options for multiple users.
Or did I get anything wrong?
RE: TVheadend web ui access only with admin - Added by Thomas Klein almost 7 years ago
Hi Jay,
well, I have to admit I didn't think through it entirely but I guess you're right.
On the other hand though, the question is whether users actually need to have access to the TVH web interface at all:
For me, only the admin needs to have access here - in order to setup the users and stream profiles.
Once that is done, "users" (in the sense of clients like Kodi's TVH client) will access the services in order to consume them. So there is actually no real "user" behind them. It's users of client frontends which again "use" the services of the TVH server, but not the server (web interface) itself.
Not sure if you get what I mean. Anyways, the situation might be different for you and as I said - I didn't think of all the implications. I'm just glad it finally works for me.
Cheers, Thomas
RE: TVheadend web ui access only with admin - Added by Jay Jayerson almost 7 years ago
Hi Thomas,
Thanks for your answer - I got what you mean.
Actually, the problem I described in my previous post isn't that critical - since users can be tagged as "no admin", they don't have access to the configuration tab at all and hence can't lift their permissions. Anyway, I still don't really know what the "Rights" permission is then used for.
Concerning the use case of common users:
My roommates and I prefer to set up recordings via webbrowser (by browsing the EPG, especially that from TVHeadendMobileUI), since you have a much better overview. Hence it makes sense to not grant everybody the right to change the system configuration.
Best, Jay
RE: TVheadend web ui access only with admin - Added by Paul M over 6 years ago
I too have been scratching my head over this... I added my wife as a user and couldn't figure out why she couldn't login in to the web interface and got 401.
After a bit of googling I discovered this thread, thanks!
RE: TVheadend web ui access only with admin - Added by Juan Ramiro Meyer over 3 years ago
The correct description as stated in https://github.com/tvheadend/tvheadend/pull/1335/files is:
The Change parameters flag allows you to control which parameters
(permission flags, all types of profiles, channel tags and ranges) are
combined when multiple entries match a username/login. When the
change parameter flag is enabled (checked) for a parameter, the setting
for this user overrides any previous entry (though it can in turn be
overridden by a later entry). The exception is the Rights option
where the permissions for all matching users having the change parameter
flag set are added together.