Affects Version/s: 6.2.0, 7.4.1
Fix Version/s: None
We are using Artifactory as docker registry.
Our docker registry look like this:
Some user groups shall not have access to 'latest' docker images, so we add an exclude pattern to the corresponding permission target: '**/latest'
With this exclude pattern the latest-image disappears from artifactory UI
BUT with 'docker pull <artifactory-url>/nts/myimage:latest' the image can still be downloaded!
When I change the exclude pattern from '*/latest' to '/latest/' we can't download the image with 'docker pull' as expected BUT we can access the myimage:latest from within the artifactory-UI
To permit access to the latest-image from UI and docker client we use 2 exclude patterns as workaround: '*/latest' and '/latest/'
In earlier version of artifactory, the exclude rule '**/latest' excluded the latest-images from I and docker client as expected!