AryonForge
Attachment Policy Manager for Jira
Set attachment rules for each Jira project. Block risky file types, limit file sizes, and keep a clear record of what was removed.
Overview
Project administrators decide which files can be attached to issues. When a file breaks the rules, the app removes it, tells the uploader why in a comment, and records what happened.
Start in Monitor mode to see what your rules would catch without removing anything, then switch to Enforce when you’re confident. The app is free to use. There is also a Confluence edition.
Features
Block or allow file types
Block extensions such as exe, or allow only the types you choose. Disguised names like invoice.exe.txt are caught too.
File size limits
Set a maximum attachment size for each project.
Monitor before you enforce
Choose Off, Monitor or Enforce. In Monitor mode you can test a policy on real uploads before it removes anything.
Try it before you save
Type a file name and size to see right away whether it would be allowed.
Audit log and history
See every file the policy acted on and every change made to the policy, with CSV export.
Exemptions and overview
Exempt service accounts, and give Jira administrators one view of every project’s policy.
How to use
Start in Monitor mode, check what your rules would catch, then switch to Enforce.
Policy, audit log and history
Project settings → Attachment Policy Manager
Cross-project overview
Settings → Apps → Attachment Policy Overview (Jira administrators)
-
Open the policy page
Go to Project settings → Attachment Policy Manager. Project administrators and Jira administrators can use it.
-
Start in Monitor mode
Set Mode to Monitor. Files that break the rules are recorded, but nothing is removed.
The project’s policy page with the three modes: Off, Monitor and Enforce -
Add rules or pick a preset
Enter your own rules or choose a preset: Block executables, Images only, Documents only or Cap size at 10 MB. Presets never change the mode.
-
Try a file name, then save
Use Try a file name to check a few names you expect, then click Save policy.
Trying a file name: invoice_final.exe is not allowed in this project -
Review the audit log
After a few days, check the audit log. Each entry is a file that would have been removed. Adjust the rules or add exemptions if you need to.
The audit log with a monitored file and the rule it broke -
Switch to Enforce
When the results look right, set Mode to Enforce. Files that break the rules are removed and the uploader is told why in a comment on the issue.
Good to know
- Rules are checked in this order: exempt users, blocked extensions, allowed extensions, then maximum size.
- Jira doesn’t let apps block an upload in advance, so a file is removed just after it is attached.
- Up to 200 audit entries and 100 policy changes are kept per project. Export to CSV to keep older records.
Screenshots
Pricing
Free
Every feature, on every site, with no licence limits and no trial to run out.
Privacy
- Stores each project’s policy, an audit log (file name, size, the rule that matched, the uploader’s Atlassian account ID and the issue key) and a history of policy changes.
- Never opens or scans file contents. Only the file name and size are checked.
- Logs are capped, and older entries are removed automatically.
- Data is kept in Atlassian Forge storage. The app makes no connections outside your Jira site.
Our privacy policy covers every AryonForge app.
Release notes
Free launch.
- The app is now free, with every feature available on every site.
- No licence restrictions or banners.
Earlier versions (2)
Marketplace licensing support.
- Added support for Atlassian Marketplace licensing. It was switched off again in 1.4.0 when the app launched free.
Initial public release.
- Per-project rules by file type and size, with exemptions.
- Off, Monitor and Enforce modes, a file-name tester and ready-made presets.
- Audit log, policy history, CSV export and a cross-project overview.
Questions about Attachment Policy Manager for Jira?
Open a request in our support portal or email support@aryonforge.com. We reply within one business day, Monday to Friday.