chorus2
chorus2 copied to clipboard
Protect Kodi settings from non priviledged user manipulation
I like the option to control the settings for Kodi through the webinterface, but I would like to see an option to prevent non priviledged users from doing so. Would it be possible to add password protection for the menu item Settings > Kodi Settings?
Chorus can only save settings to local browser storage, so opening a different browser or using a different computer would bypass this. Ideally I would like to retrieve addon settings from kodi via the api giving central storage for settings, but this is not yet available in the kodi api, when it is, we can certainly look at adding this.
+1 - as kodi instances become family appliances I see the need for this as well.
Maybe a simpler way via a server-side setting (e.g. via an advanced-setting) to not expose Kodi's low level configuration via web-interface would be a simpler but useful way to start, it could be a flag that chorus could read and then decide what configuration to expose. Later on, perhaps extending the same idea (advanced settings) to create the concept of 'admin' and 'user' credentials for webinterface - where admin exposes everything and user can be restricted as needed