Medium Description
Raise from https://support.atlassian.com/browse/BSP-773
Artifacts can be viewed/downloaded by anonymous users even when anonymous access is restricted at a global level. (Seems it doesn't look to the global level when evaluating permissions)
To replicate:
- create an artifact (note the url)
- remove global anonymous access
- logout
- enter the artifact url
Attachments
Issue Links
- duplicates
-
BAM-1996 Anonymous user is able to download artifacts even if Anonymous mode is disabled both at global level and plan level
-
- Closed
-