User Password bypass on startup

Running an SQ-7 on 1.5.1. I’ve got a password set on the Admin user account, and have a Guest user account that loads a scene with locked down permissions.

If I’m logged in as Admin and then power off the board, the next time the board is powered on if you pick the Guest user but select “No” to loading the scene, it won’t show you logged in as any user but you’ll have full admin access to the board.

Is this a bug, or is there some option I’m missing to prevent this from happening?

your description is very misleading…
what happens at the login screen?
Did you configure the users as you need them?

The console always attempts to power ON with the same user as was current when powered OFF. If your GUEST account has no password, then switch user to GUEST before powering OFF, and you won’t be prompted for a password on the next power ON.

@Lahn -

The pop-up you mention says “User Scene, User scene will be recalled. Continue Login? Yes/No”
So with the Yes/No, you are choosing whether to continue logging in as your guest user (rather than only choosing whether to recall the scene).

As @Scott points out, this means by selecting ‘No’ the SQ will go back to trying to log in as the previous user.
You can see what’s happened immediately after the pop-up by checking ‘Current User:’.

Cheers,
Keith.

Hey there!

I second Lahn’s question / request. I think this might be a bug, as a Guest user could bypass password and user restrictions unintentionally:

To replicate the bug:

  • Turn off the board when logged in as the Admin (or any other user safed with a password)
  • Turn on the board
  • Select the Guest user (i.e. user without password and restricted permissions)
  • There will be a pop up as mentioned by @KeithJ A&H: “User Scene, User scene will be recalled. Continue Login? Yes/No”
  • Press “No”
    Then you will have full access to all the features. So basically you are Admin user, but on the home screen, where usually the logged in user is shown, it says nothing.

I’ve tested a couple of ways and this is the only way to replicate it. It doesn’t occur when turning the board off while logged in as Guest user (no matter if you choose to load the user scene or not), and it doesn’t occur when continuing the login with “Yes” in step 4 and thus loading the user scene.

Cheers,
Luki

Hi,
I’d like to second what Lahn and Luki wrote.
I’m currently setting up a new sq5 console and ran into the issue that Luki just described perfectly how to reproduce.

So is there a way to either stop the console from asking if it should load the scene or fixing this bypass bug?

I also tried to solve this by giving all users a password, but this does not help, the bypass still works for any user with an assigned scene.

Thanks for any answers Keith and friends :slight_smile:
Regards
Varius

Hi All,

Just to note this was logged as a bug and something we plan to fix in a future update.

Thanks,
Keith.

Hi Keith,

Thank you so much! Looking forward to it :slight_smile:

Thanks!
Joe