Resolution

How can I determine which users need build delete permission?

AuthorFullName__c
Joshua Han
articleNumber
000004470
ft:sourceType
Salesforce
FirstPublishedDate
2019-04-18T19:09:15Z
lastModifiedDate
2021-05-19
VersionNumber
6

Note that:

  • This change does not affect users with Artifactory Admin privileges as the admin users have DELETE permission for builds even after the upgrade to 6.6 and above.
  • Following REST APIs did not require Artifactory Admin privilege in versions prior to 6.6.0: Build Upload, Build Promotion, Build Rename, Control Build Retention

Thus, here is what you may do to mitigate disruption after upgrading Artifactory version <6.6.0 to >=6.6.0.

  1. Identify which non-admin users who will need build DELETE permission by searching Artifactory's request.log files the REST API endpoints above
  2. Prepare a procedure to update those users' permissions to include build DELETE permission after the upgrade completes
  3. Upgrade to 6.6. or above (e.g. 6.9.0)
  4. Add build DELETE permission for the users identified in step #1

Also note that there is a small window that you may see those REST APIs above fail in between step #3 and #4.