For Confluence administrators and space administrators who set the app up and look after it. If a file of yours was removed, see If your file was removed.
You decide which files can be attached to pages and blog posts. When someone attaches a file that breaks your rules, the app can remove the file, post a comment on the page that tells the uploader what happened and why, and record it in an audit log. You can also limit how much a space stores, in total size and in number of files.
One thing to know up front: Confluence doesn’t let apps block an upload before it happens. The app checks each file right after it’s attached, usually within seconds, and removes it then.
| What | Where | Who can open it |
|---|---|---|
| A space’s policy, audit log and history | Space settings → Integrations → Attachment Policy Manager | Space administrators and Confluence administrators |
| The global policy, every space at once, the global audit log | Confluence administration → Apps → Attachment Policy Manager | Confluence administrators |
Confluence administrators can turn off Allow space administrators to create a space policy. Then every space uses the global policy, whatever its space administrators have set.
When the app is first installed, the global policy is Off, so nothing is checked until someone sets it up.
| Mode | What happens when a file breaks the rules |
|---|---|
| Off | Nothing. Files aren’t checked. Your rules are kept but not used. |
| Monitor | The file stays. The audit log records it. |
| Enforce | The file is removed, the uploader gets a comment on the page, and the audit log records it. |
A preset fills in rules for you. It only changes the rules it describes and never changes the mode.
AryonForge
exe, bat and msi.exe also catches invoice.exe.txt.Type the extensions without dots, separated by commas: exe, bat, sh.
Enter 0 for no limit.
The two space limits need the space to be counted first. The app starts counting on its own when you save a limit. You can see the count, and start a new one, on the Space storage card.
When this is on, the app checks that each file really is what its name says. For example, it catches a program renamed to invoice.pdf, or a ZIP file renamed to notes.txt. It reads only the first 64 KB of each file, and it never keeps or sends the content anywhere.
This is not a virus scanner. A real PDF with something harmful inside is still a real PDF.
Sometimes a check can’t run. For example, Confluence might not report a file’s size, or the space might not be counted yet. You choose what happens then:
An optional note, up to 500 characters, added to the comment the app posts when it removes a file. Use it to say where files like this belong, or who to ask for an exception. The form shows a preview of the full comment as you type.
Files uploaded by exempt people or groups are never checked. Use this for trusted accounts, such as an integration that uploads build files. App accounts can’t be picked here.
Test a file shows what the policy would do with a file name you type, and optionally a size and an uploader. It works on the rules you’re editing, before you save, and nothing is uploaded. It can’t test file content validation, because that needs a real file.
The Audit log tab lists files that broke a policy and what happened to each: Removed, Monitored, Removal failed, and so on. You can filter by action, rule and policy, search by file name, page or reason, and export the list as CSV. A space keeps its newest 200 entries, and the global audit log keeps 500. Export the CSV if you need to keep more.
The History tab shows every change to a policy: who made it, when, and what changed. It keeps the newest 100 changes per policy.
If someone’s Atlassian account is closed, the app removes their account ID within about a week, and their entries show Former user instead.
Confluence administrators can open the Spaces tab to see which policy every space uses, its mode and rules, and how many files it holds. It also warns you about spaces worth a look, such as a space whose own policy is turned off, or a space over its storage limit. Export CSV gives you the same list in a spreadsheet.
If the app removed your file, you’ll see a comment on the page that mentions you. It says which file was removed and why, for example File type ".exe" is blocked in this space. It may also include a note from your administrators.
The file is in the space’s trash, not deleted for good. If you think it was removed by mistake, ask a space administrator. They can see the entry in the audit log, and they can change the rules or exempt you.
Confluence stores the file before any app can see it. The app removes it right after, usually within seconds, and a little longer when many files arrive at once.
No. Rules apply to new uploads and new versions. Files already on the page are left alone.
Only if the global policy is turned on. Until then, it checks only spaces that have their own policy in Monitor or Enforce mode.
The app stops checking new files, and policies can’t be changed. Your policies, audit log and history stay available and can be exported. Nothing is deleted.
No. Everything stays in your Confluence site’s app storage on Atlassian’s cloud. The app has no servers of its own and uses no analytics.
Open a request in the AryonForge support portal, or email support@aryonforge.com. We reply within one business day, Monday to Friday. To report a security problem, choose “Report a security issue” in the portal, or email the same address with “Security” in the subject line. More on how we help: Support.