External user with "guest" access cannot access builds (even with public builds on)

I have an external user with "guest" access to a (private) project. I want them to be able to download artifacts but not source code. The roles permissions page says that users with "guest access" should be able to "Download and browse build artifacts, If Allow guest to access builds is enabled in CI settings".

I cannot find a setting by that name, but there is a setting called "Public builds" which looks like it might have once been that setting.

Is there a way to get the behaviour I want with the current version?

@dpwright I think that 'Allow guest to access builds` works only for public projects. We will check that, though.

Added ~19173 label

I see, thanks. In our case I don't think that works so well, since we have multiple clients so we generally keep all projects private and then add clients as needed. It is very convenient for them to be able to access the builds, as well as the issues page and wiki (though the issues and wiki aren't essential for us), but in some cases we can't give them full access to the source.

Do you think allowing that setting for non-public projects is something you might consider, or is there some reason for not allowing this, in which case we should look for an alternative build delivery mechanism?

It does seem like this should do what you want.

If nothing else we've got a bug in that footnote #1 (closed) on https://gitlab.com/help/permissions/permissions#fn1 has information for a setting that doesn't exist. I'm not sure why we would have removed that meaning. Perhaps it was an oversight.

Added ~12980 label

I can't find the setting anywhere. I would like to use it in combination with external user with guest access.

Is there any plan around that feature? When a Guest clicks the build result on the home page for the project he gets a 404.

My use case is I'd like to give access to nightly builds to my users without cluttering their profile if they are not developers

I'm not sure it's related, but it seems that a guest can't download artifacts via the "latest" URL (#4255 (closed)) either - guest accounts seemed to be just perfect for this case.

Reassigned to @zj

@markpundsack The footnote is now updated, so that thing is fixed. :)

At this time guests can't view pipelines/jobs because authorisation fails, as the policies doesn't allow it. I'm looking for a good fix right now

Mentioned in commit 88475528

Mentioned in commit d216792e

Mentioned in commit 56d2fe33

Hi ! is there a milestone for the resolution of this problem ?

@flonou see https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/6842

Mentioned in commit a74e5332

Mentioned in commit 743078c6

mentioned in commit 617f43c7

closed via merge request !6842 (merged)