Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-15249

Removing "Any" permission target causes [DENIED DOWNLOAD] for anonymous user, but retrieves the file

    Details

      Description

      Steps to reproduce:
      1. Enable "Allow Anonymous Access".
      2. Remove the default "Any" permission target.
      3. Create a Maven virtual repository, which aggregates JCenter.
      4. Grant permissions to anonymous user for jcenter repository.
      5. Download any artifact from the virtual repo, either from the UI, or using curl, for example:

      curl http://localhost:8081/artifactory/mvn-vir/alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom
      

      The file will be retrieved, however, the acces.log shows:

      2017-11-10 19:03:53,618 [ACCEPTED DEPLOY] jcenter-cache:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for anonymous/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,623 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,623 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,624 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,625 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1 for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,626 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1 for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric/norris for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,630 [DENIED DOWNLOAD] mvn-vir:alaric for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,631 [DENIED DOWNLOAD] mvn-vir: for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,631 [ACCEPTED DEPLOY] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for anonymous/0:0:0:0:0:0:0:1.
      2017-11-10 19:03:53,631 [ACCEPTED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for anonymous/0:0:0:0:0:0:0:1.
      

      If the file is in the jcenter-cache repository, fetching this file again will produce this, in the access.log:

      2017-11-10 19:05:11,490 [DENIED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for NA/0:0:0:0:0:0:0:1.
      2017-11-10 19:05:11,492 [ACCEPTED DOWNLOAD] mvn-vir:alaric/norris/core/library/norriscorelib/0.0.1/norriscorelib-0.0.1.pom for anonymous/0:0:0:0:0:0:0:1.
      

      If requesting the file directly from the remote repository, the expected behavior is shown:

      curl http://localhost:8081/artifactory/jcenter/antistatic/spinnerwheel/1.0.0/spinnerwheel-1.0.0.pom
      
      2017-11-10 19:08:07,572 [ACCEPTED DEPLOY] jcenter-cache:antistatic/spinnerwheel/1.0.0/spinnerwheel-1.0.0.pom for anonymous/0:0:0:0:0:0:0:1.
      2017-11-10 19:08:07,576 [ACCEPTED DOWNLOAD] jcenter:antistatic/spinnerwheel/1.0.0/spinnerwheel-1.0.0.pom for anonymous/0:0:0:0:0:0:0:1.
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              avivb Aviv Blonder
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: