Prevent attachment downloads
The attachment download control lets you choose whether all your users can download attachments from Jira or Confluence. What is a data security policy?
Who can do this? |
How do I use this control?
You can choose to prevent or allow attachment downloads for your organization. You can also customize your control with overrides if you wish to be more specific about which attachment downloads to restrict.
What will my users experience?
The information on this page describes what your users will experience when you apply a control to your organization. If you add overrides, make sure you test the results to maintain the level of security you require. Configure an override for a control
Blocked user experience
When the attachment download control is set to Blocked:
Users will still be able to see attachments in Confluence and Jira apps.
Users will be able to use their browser tools to download attachments from Jira and Confluence.
Users won’t be able to download attachments using the download button in the file preview, the page attachments list, the space attachments list, the attachments macro, the contextual toolbar in the editor, and in other places where we provide a download button for an image or file.
Users won’t be able to use APIs to download any attachments from Jira or Confluence.
Users with edit permission to a page can use the Copy and Paste functionality from the image toolbar to copy and attachment to another page.
Allowed user experience
When the attachment download control is set to Allowed:
There are no restrictions on how attachments are rendered or downloaded.
Limitations
The attachment download control doesn’t manage (or block) browser-based download-related actions such as printing, saving, or actions performed by browser extensions.
Was this helpful?