I set up a user for eventually letting a family member view jellyfin media through tailscale and I wanted to restrict their access to media only but on the list of shares under the user they all say read/write access with a dropdown that has no other option then read/write? Do I need to turn off PUBLIC from each share to get an option here? If so will it cause my windows machines inside my network to have to submit a name/password to use that share? Thank you.

There is not a way to leave a share as public, but then restrict specific users from accessing it, that I heard heard of.

Yes.

Would make no sense to restrict this user access to some shares when they log in, but they can just not log in and access everything since it's public...

You'll have to submit user/pw once for each of your machines but then they'll remember it.

Edited May 24May 24 by Kilrah

You need to understand Samba and SMB a little bit more. Read the thread that contains this post:

https://forums.unraid.net/topic/191221-some-musings-on-smb-and-samba-and-unraid-and-windows/#findComment-1561581

The next two posts explain how to set up your Unraid server and Windows clients to use SMB/Samba. The entire thread is a short explanation of the how's and why's of SMB and Samba.

Thank you for all the advice I think Frank1940 hit it I just don't understand the structure of what I'm doing, I'll read up on it more. For me I thought public meant anyone within my internal network and anyone coming in from the outside I could restrict that clearly isn't the case.

2 hours ago, Johnny said:

Thank you for all the advice I think Frank1940 hit it I just don't understand the structure of what I'm doing, I'll read up on it more. For me I thought public meant anyone within my internal network and anyone coming in from the outside I could restrict that clearly isn't the case.

Understand that Unraid is never intended to on on the WAN (or Internet, if you prefer). It expects that all users will be on a secured LAN (Local Area Network). Tailscale is designed to to provide a secured tunnel through the WAN to your server from a remote known client. Any user that comes in via Tailscale is considered to a Local user.

18 hours ago, Johnny said:

I set up a user for eventually letting a family member view jellyfin media through tailscale and I wanted to restrict their access to media only but on the list of shares under the user they all say read/write access with a dropdown that has no other option then read/write? Do I need to turn off PUBLIC from each share to get an option here? If so will it cause my windows machines inside my network to have to submit a name/password to use that share? Thank you.

If you're giving them jellyfin access, why do they even need access to the rest of the server? Their jellyfin client accesses jellyfin server through jellyfin's own backend. They do not need access to SMB or your NAS directly at all...