Restrict file extensions on Appian Designer

RE: Restrict file extensions on Appian Designer

Stefan Helzle — Mon, 06 May 2024 17:43:02 GMT

Is this on a PROD environment? In an older blog post, I discuss a way to allow secure access to PROD for a support team.

https://appian.rocks/2023/09/20/support-processes-on-appian/

RE: Restrict file extensions on Appian Designer

yashwanthr0001 — Mon, 06 May 2024 17:27:06 GMT

One of the Appian group in our application is part of designer group which means they will be able to access Appian designer (Support group). So we want to make sure that no one can upload any harmful file(.exe for example) using designer. We have added necessary restrictions for our sites by adding on admin console but we also needed to have a similar restriction on designer as well.

RE: Restrict file extensions on Appian Designer

Stefan Helzle — Mon, 06 May 2024 17:18:38 GMT

What do you want to achieve with this? Or, what do you want to prevent?

RE: Restrict file extensions on Appian Designer

Mike Schmitt — Mon, 06 May 2024 15:11:33 GMT

I believe the best practice would be to limit designer access to users who know what they're doing, and who won't upload files of a type that aren't allowed by project development best practices. You can enforce that by good project management oversight (daily if needed, i guess).

For what it's worth, though, simply uploading an EXE file to the appian environment has *extremely little* potential danger in and of itself - even a compromised file (afaik) would need to be downloaded and run by some other user for it to ever have any effect.

RE: Restrict file extensions on Appian Designer

yashwanthr0001 — Mon, 06 May 2024 15:05:39 GMT

Yeah, Admin console is only restricting for fileUpload component. One thing we've tried was to add a fileMatch in httpd.conf file on webserver but that didn't worked out for us.

RE: Restrict file extensions on Appian Designer

Konduru Chaitanya — Mon, 06 May 2024 14:52:28 GMT

I am not sure if you can apply restrictions on creating a document object. AFAIK we cannot.

The Upload File settings on Admin console will be applied only on the file upload component.

Ref: File Upload - Admin console/System