Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.
If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!
Restrict anonymous user
-
I'm currently evaluating ProGet free edition, and I am having dramas restricting the anonymous user.
I've created a feed and published few packages to it. The security is 'Built in' with the out of the box settings.
Anonymous users can browse the feed, and for some reason they can delete packages.
If I restrict the anonymous for "Administer" or "Manage Feed" tasks then anonymous users can't browse the feed, instead they are asked to login.
Product: ProGet
Version: 4.8.6
-
Images didn't seem to render properly:
-
I think I got it working.
The documentation is really lacking and hard to find. After hours of searching I found https://inedo.com/support/kb/1112/api-keys-in-proget page.
- First I had to drop anon permissions to "Publish Packages" (I think it may have been off by default).
- Add a new task (e.g. "Publish to feed") and select the following operations:
- Add package
- Overwrite package
- View feed
- Grant anon user permissions to the new task
- Set an API key for the target feed and use the key in my CI/CD pipeline
