Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

[BUG] Attachment access without login Edited

Hello,

I would like to share a very strange behaviour, I have an account on trello with my company and we upload some attachement to the diferents tickets. But recently I noticed that we can have an access to the attachment even if we don't have an account on trello ! It's open bar !

Why ? It's a security problem...

PS: Url begin with: https://trello-attachments.s3.amazonaws.com/.....

1 answer

0 votes
Iain Dooley Community Leader Sep 07, 2020

@Itafr italiano firstly, yes that's true but you'll notice that the link is very obscure, it's kind of like when you set a Google Doc such that anyone with the link can view. If someone gets the link, they can see it without being logged in, but guessing the link is mathematically impossible.

However, Trello is changing this behaviour:

https://community.developer.atlassian.com/t/authenticated-access-to-s3/40647?_ga=2.131524687.1164060461.1598221099-299049771.1576052240

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Trello

📹 What is Trello?

Hello Community!  My name is Brittany Joiner and I am a Trello enthusiast and Atlassian Community Leader. I'll be sharing with you a series of videos with my top tips on how to best use Trello...

817 views 13 30
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you