AryonForge
Attachment Policy Manager for Confluence
Set rules for the files people attach in Confluence. Block risky file types, limit file sizes and space storage, and see every file the app removed and why.
In review for the Atlassian Marketplace. The user guide is ready now.
Overview
Confluence administrators set one policy for the whole site, and space administrators can give a space its own rules. When someone attaches a file that breaks the rules, the app removes it, posts a comment on the page that tells them why, and records it in an audit log.
Start in Monitor mode to see what your rules would catch without removing anything. When the results look right, switch to Enforce. This is the Confluence edition of Attachment Policy Manager for Jira.
Features
Block or allow file types
Block extensions such as exe, or allow only the types you choose. Hidden extensions like invoice.exe.txt are caught too.
Size and storage limits
Set a maximum file size, a total storage limit for each space, and a maximum number of files.
File content validation
Checks that a file really is what its name says, so a program renamed to .pdf doesn’t get through. Only the first 64 KB is read, and nothing is kept.
Monitor before you enforce
In Monitor mode the app records what it would remove and leaves the file alone. Check your rules on real uploads first.
One policy, or one per space
Set a global policy for every space, let spaces have their own, or require the global policy everywhere.
Test a file
Type a file name and size to see what the policy would do, before you save.
A note for uploaders
Add your own message to the removal comment, such as where files like this belong or who to ask.
Audit log and history
See every file the policy acted on and every change to the policy. Search, filter and export to CSV.
Every space at a glance
Confluence administrators see each space’s policy, mode, files and storage on one page, with a warning for spaces that need a look.
How to use
Start in Monitor mode, check what your rules would catch, then turn on Enforce when you’re happy with the results.
A space’s policy, audit log and history
Space settings → Integrations → Attachment Policy Manager
The global policy and every space at once
Confluence administration → Apps → Attachment Policy Manager (Confluence administrators)
-
Open the app
For one space, open the space’s settings and choose Use a space policy. Confluence administrators can set one policy for every space on the Global policy tab instead.
-
Start in Monitor mode
Under Enforcement mode, choose Monitor. Files that break your rules are recorded, but nothing is removed yet. The summary at the top always shows what is saved.
The policy summary and the three modes: Off, Monitor and Enforce -
Add your rules
Pick a preset such as Block executables, or enter your own: file types to block or allow, a maximum file size, and limits for the space’s total storage and number of files. You can also check that each file’s content matches its name, and add a short note for uploaders.
-
Try a file before you save
Test a file shows what the rules on screen would do with a file name and size. Nothing is uploaded. When you’re happy, click Save policy.
Test a file: invoice.exe.txt is caught because .exe is blocked, even though the name ends in .txt -
Check the audit log
After a few days, open the Audit log tab. Each row is a file your rules caught, with the rule, the reason, who uploaded it and the page. If something is there that shouldn’t be, change the rules or add an exemption.
The audit log, listing removed and monitored files with the rule and reason for each -
Switch to Enforce
When the audit log looks right, set the mode to Enforce. A file that breaks the rules is removed within seconds, and the uploader gets a comment on the page that says why. The file goes to the space’s trash, so it can be restored.
The comment the uploader sees on the page after a file is removed, with the reason and the administrators’ note -
Look back whenever you need to
The History tab shows who changed the policy, when, and exactly what changed. Confluence administrators also have one view of every space, shown at the top of this page.
Policy history, newest first, with who made each change and what changed
Good to know
- Confluence doesn’t let apps stop an upload before it happens, so a file is removed just after it’s attached, usually within seconds.
- Removed files go to the space’s trash, so they can be restored.
- Each space keeps its newest 200 audit entries (500 for the global policy) and 100 policy changes. Export the audit log to CSV to keep more.
Pricing
Free for up to 10 users
Larger sites can try it free, then pay per user through the Atlassian Marketplace, monthly or yearly. Atlassian handles quotes, invoices and licences.
Privacy
- Stores each policy, an audit log (file name, size, the rule that matched, the uploader’s Atlassian account ID and the page) and a history of policy changes.
- With file content validation on, reads the first 64 KB of each new file to check its type, then discards it. File content is never stored.
- Once a week, asks Atlassian which of the stored accounts have been closed, and removes those account IDs.
- Logs are capped, and older entries are removed automatically.
- Data stays in Atlassian Forge storage. The app makes no connections outside your Confluence site.
Our privacy policy covers every AryonForge app.
Release notes
Easier-to-read tables.
- The audit log gives the reason more room, and labels such as Content mismatch are never cut short.
- The Spaces overview shows each space’s rules as tags, the same as the policy summary.
- When a policy can’t be saved, the app’s own logs no longer record what was typed.
Earlier versions (8)
Ready for the Marketplace.
- Prepared for release on the Atlassian Marketplace. Free for up to 10 users, with a free trial for larger sites and monthly or yearly billing.
- A redesigned policy form with a summary at the top, preset tiles, and clearer wording on every screen.
- Add your own note to the removal comment, and search the audit log.
- Account IDs of closed Atlassian accounts are now removed automatically every week.
File limits and file content validation.
- Set a maximum number of files for each space.
- Optionally check that each file’s content matches its type.
- See how many files each space holds and how much storage it uses.
Space storage limits.
- Set a limit on the total size of the files in a space.
Group exemptions.
- Exempt whole groups, not only people.
- Each space’s audit log shows what happened in that space.
A global policy for every space.
- Confluence administrators can set one policy for the whole site.
- A removed file is also taken off the page, so no broken attachment is left behind.
Clearer space context.
- The policy page shows the space key, so it’s always clear which space you’re configuring.
Stronger file name matching.
- Blocked extensions also catch file names written with look-alike characters.
First release.
- Rules for each space by file type and size, with exemptions.
- Off, Monitor and Enforce modes, a file name tester and presets.
- Audit log, policy history and CSV export.
Questions about Attachment Policy Manager for Confluence?
Open a request in our support portal or email support@aryonforge.com. We reply within one business day, Monday to Friday.