Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-19027

Download package from local npm repo fails with no anonymous user read permission

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: 6.3.3
    • Fix Version/s: None
    • Component/s: NuGet, permissions, Security
    • Labels:
      None
    • Environment:

      Description

       

      nuget install command returns error.

      Console log contains:

       

      PM> nuget install sibur
      Feeds used:
      https://repo.dev002.local/api/nuget/fct-dp-sicore-nuget-dev
      
      Installing package 'sibur' to 'C:\Users\lila\source\repos\ConsoleApp1'.
      GET https://repo.dev002.local/api/nuget/fct-dp-sicore-nuget-dev/FindPackagesById()?id='sibur'&semVerLevel=2.0.0
      OK https://repo.dev002.local/api/nuget/fct-dp-sicore-nuget-dev/FindPackagesById()?id='sibur'&semVerLevel=2.0.0 17ms
      nuget.exe : Unable to find package 'sibur'
      At line:1 char:6
      + nuget <<<< install sibur
      + CategoryInfo : NotSpecified: (Unable to find package 'sibur':String) [], RemoteException
      + FullyQualifiedErrorId : NativeCommandError
      
      

      If you follow the link:

      https://repo.dev002.local/api/nuget/fct-dp-sicore-nuget-dev/FindPackagesById()?id='sibur'&semVerLevel=2.0.0

      You will find something like this:

      <?xml version='1.0' encoding='UTF-8'?>
      <feed xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata" xmlns="http://www.w3.org/2005/Atom" xml:base="https://repo.dev002.local:443/api/nuget/fct-dp-sicore-nuget-dev/">
      <title type="text"></title>
      <id>http://schemas.datacontract.org/2004/07/</id>
      <updated>2019-04-16T08:56:40Z</updated>
      <link rel="self" title="FindPackagesById" href="FindPackagesById"/>
      <entry>
      <id>https://repo.dev002.local:443/api/nuget/fct-dp-sicore-nuget-dev/Packages(Id='Sibur.NotificationService.Grpc',Version='0.2.4')</id>
      <title type="text">Sibur.NotificationService.Grpc</title>
      <summary type="text">Notifications microservice (send email, push via Firebase)</summary>
      
      ...
      

      If I add read permission to user anonymous for this repo, I am able to fetch this dependency.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            Lee Leonid
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated: