Artifactory allows administrators to configure anonymous access. With this feature enabled, users can view items, download items, and deploy items without actually logging in.
Often customers want to be able to enable anonymous access on certain repositories but not others, or they may want to allow the anonymous user some actions, such as downloading, while restricting others such as deploying.
Artifactory allows the administrator to further control how exactly anonymous access is configured on this repository via the anonymous user, which serves as a placeholder for all anonymous users.
Normally, this user is included in the permission targets “Anything”, which includes all local repositories and gives read permissions, and “Any Remote”, which includes all remote repositories and grants read and deploy permissions for caching.
For customers who want to restrict anonymous access, the first step is to remove the anonymous user from the “Anything” and “Any Remote” permission targets and add it to targets specific to that repository, which will prevent the anonymous user from having free rein of all repositories.