Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-2548

Artifacts are not restricted by removing global anonymous access

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 2.0.3
    • 2.0.1
    • Artifacts, Security
    • None

      Raise from https://support.atlassian.com/browse/BSP-773

      Artifacts can be viewed/downloaded by anonymous users even when anonymous access is restricted at a global level. (Seems it doesn't look to the global level when evaluating permissions)

      To replicate:

      • create an artifact (note the url)
      • remove global anonymous access
      • logout
      • enter the artifact url

              mark@atlassian.com MarkC
              bmccoy bmccoy
              Votes:
              1 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: