Artifacts are not restricted by removing global anonymous access

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Medium
    • 2.0.3
    • Affects Version/s: 2.0.1
    • Component/s: Artifacts, Security
    • None

      Raise from https://support.atlassian.com/browse/BSP-773

      Artifacts can be viewed/downloaded by anonymous users even when anonymous access is restricted at a global level. (Seems it doesn't look to the global level when evaluating permissions)

      To replicate:

      • create an artifact (note the url)
      • remove global anonymous access
      • logout
      • enter the artifact url

            Assignee:
            MarkC
            Reporter:
            bmccoy
            Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: