Is this a Bug or a normal Feature?

[Wasca]

I'm running netbox in Docker and just noticed that when I add an image to a site it creates a URL like this to view the image (https://netbox.yourdomain.com/media/image-attachments/site_1_imagename_DA3Udxm.png)

This URL is accessible even if you're not logged into netbox, i.e. Anyone with the URL and has access to the netbox install can view the image without logging in. I just want to check if this is intended, I thought you'd need to be logged in to view these images as they could reveal sensitive information.

[johnnyplaydrums]

I think that is a normal feature: https://netbox.readthedocs.io/en/stable/configuration/optional-settings/#login_required

If you want to put all Netbox content behind a login, set LOGIN_REQUIRED = True in your config.

[Wasca]

Thanks @johnnyplaydrums

I'm very new to netbox and was unaware of this feature, much appreciated!

[johnnyplaydrums]

Ya no problem! I'm new to Netbox too and happened across this topic in the docs earlier today.