Posted on December 30, 2022 (Updated on July 20, 2025)

Restricted Acces to the Attach file, ArcGIS Enterprise

Hiking & Activities

Locking Down Your Attachments in ArcGIS Enterprise: A Plain-English Guide

ArcGIS Enterprise: it’s a powerhouse for managing maps and geographic data within your organization. And let’s face it, a picture (or a document, or a spreadsheet) is worth a thousand map clicks. That’s where attachments come in, letting you add supporting info right to your map features. Think photos of damaged infrastructure, PDFs of property surveys, you name it. But here’s the thing: just like you wouldn’t leave your front door unlocked, you can’t just leave those attachments wide open. Controlling who sees what is key to keeping your data safe and sound. So, how do you actually do it? Let’s dive in.

Cracking the Code: Attachment Security Basics

Attachments live and breathe within feature layers. You can turn them on or off at the feature layer level, which is a start. But simply flipping the switch isn’t enough. ArcGIS Enterprise gives you some pretty granular controls over who can peek at, add to, tweak, or even trash these attachments. It’s all about understanding the levers you can pull.

Your Toolbox: Methods for Restricting Access

Alright, let’s get practical. Here’s a breakdown of the most effective ways to lock down your attachments:

  • Feature Service Permissions: The Foundation: Think of these as the gatekeepers to your data. The ArcGIS Server admin (or whoever owns the feature layer) can decide who gets to do what. We’re talking Create, Delete, and Update privileges.

    • Create: This lets folks add new features, and if attachments are enabled, tack files onto those new entries. Makes sense, right?
    • Update: Want to let people change existing features and their attachments? This is your permission. Crucially, it’s also needed to update or delete attachments.
    • Delete: Handle with care! This one lets users wipe out features and their attachments. Here’s a gotcha: even if someone only has “Delete” permissions, they can still nuke attachments. So, if you want to prevent accidental (or malicious) deletions, keep this permission away from them. I learned that one the hard way after a colleague accidentally deleted a bunch of critical inspection photos!

  • Hosted Feature Layer Views: Tailoring Access: These are like custom windows into your data. You’re not changing the original, but you’re showing different things to different people. Each view inherits the attachment setting of the hosted feature layer it was created from. You can hide attachments in a view, which means some users see them, and others don’t. Imagine creating a public view of your data that shows locations of parks, but hides internal documents about park maintenance. Boom, instant security.

  • No Anonymous Guests Allowed: This is a no-brainer. Shutting down anonymous access to your ArcGIS Enterprise portal forces everyone to log in. No login, no access. Period. This stops random internet lurkers from stumbling upon your sensitive attachments.

  • HTTPS: The Encryption Shield: Think of HTTPS as putting your data in an armored car. It encrypts everything moving between your server and users. Without it, passwords and attachment data can be intercepted, especially when people are accessing things from outside your office network. Make sure HTTPS is enforced on your web server, too!

  • File Type Restrictions: The Bouncer at the Door: This isn’t a direct access control, but it’s still super important. By limiting the file types people can upload (e.g., only allowing JPGs and PDFs), you can block potentially harmful files from sneaking in. If you don’t specify a list of allowed file extensions, the types of files that can be attached are limited by your ArcGIS organization configuration.

  • Lock Down the Proxy: This is a bit technical, but crucial. Restricting the portal’s proxy capability to approved web addresses prevents bad actors from using your portal to launch attacks on other systems.

  • The Related Table Trick: Okay, this is a bit of a workaround, but it’s a clever one. Instead of directly attaching photos to your feature layer, you can use a related table. Give users “Create” permissions on that table to add records with photos. The downside? The photos aren’t as easy to see in the pop-up. But the upside? It’s a more secure way to manage those attachments.

    • Pro Tips: Best Practices for Attachment Security

    Beyond the nuts and bolts, here’s some advice I’ve picked up over the years:

    • The Least Privilege Rule: Only give people the bare minimum access they need to do their jobs. Resist the urge to hand out admin privileges like candy.
    • Regular Check-ups: Treat your security settings like your car: get them checked regularly. Review user roles, permissions, and all those settings to spot any weak points.
    • Patch It Up: Keep your ArcGIS Enterprise deployment up-to-date. Esri releases patches all the time to fix security holes. Don’t ignore them!
    • Keep an Eye on Things: Set up logging and auditing to track who’s accessing and changing attachments. This helps you catch suspicious activity early.
    • Email Notifications: Configure your organization to send email notifications to members and administrators in the event of a forgotten password, updated password policy, and more.
    • CA-Signed TLS Certificates: Configuring a certificate from a trusted authority is a secure practice for web-based systems and will prevent users from encountering browser warnings or other unexpected behaviors.
    • Token Expiration Time: As a security best practice, make sure you specify your token expiration.

    The Bottom Line

    Securing your attachments in ArcGIS Enterprise isn’t just a good idea; it’s essential. By understanding the tools and following these best practices, you can keep your data safe, sound, and out of the wrong hands. Trust me, a little bit of security planning goes a long way!

    You may also like

    Field Gear Repair: Your Ultimate Guide to Fixing Tears On The Go

    Outdoor Knife Sharpening: Your Ultimate Guide to a Razor-Sharp Edge

    Don’t Get Lost: How to Care for Your Compass & Test its Accuracy