ARTIFACTORY: Hiding deployed_by and last_downloaded_by Information in Artifactory

Introduction 

In the JFrog Platform, the Tree Browser provides users with detailed insights into artifacts, including metadata such as “deployed_by” and “last_downloaded_by”. This information can be sensitive, particularly in environments where anonymous access is enabled or users from outside the organization might use it as well. To enhance security and privacy, administrators have the option to hide the “deployed_by” and “last_downloaded_by” from users who do not possess administrative privileges.

 

Objective

This article aims to guide Artifactory users and administrators on how to conceal the deployed_by and last_downloaded_by information from non-admin users. This option is available starting from Artifactory v7.42.8.

Steps 

1. Add the below property to artifactory.system.properties located at $JFROG_HOME/artifactory/var/etc/artifactory

artifactory.security.personal.info.non.admin.exposure=false

 

Please note that the default value for this property is: true

 2. Restart Artifactory for the new setting to take effect.

Expected Outcome

After completing the above steps, users accessing the Tree Browser will no longer see the deployed_by and last_downloaded_by information, effectively maintaining the confidentiality of this metadata for non-admin users.

 

Conclusion

Following the steps above, we can hide the deployed_by and last_downloaded_by to ensure that the JFrog Platform maintains a higher level of data privacy and security. This is particularly crucial in environments with anonymous access.