Configure asset upload restrictions configuring-asset-upload-restrictions

CAUTION
AEM 6.4 has reached the end of extended support and this documentation is no longer updated. For further details, see our technical support periods. Find the supported versions here.

You can configure Adobe Experience Manager Assets to restrict the type of assets (files) that users can upload. This feature helps you eliminate the possibility of users uploading assets in an undesired format or uploading any malicious files. The Day CQ DAM Asset Upload Restriction service enables you to control the type of files that users can upload. By default, Experience Manager Assets allows users to upload assets of all MIME types. However, you can configure the service to restrict users to upload files of specific MIME types only.

  1. To open the Configuration Manager web console, access https://[AEM_server]:[port]/system/console/configMgr.

  2. Open the Day CQ DAM Asset Upload Restriction service in Edit mode. By default, the Allow all MIME option is selected, which allows users to upload files of all MIME types.

    chlimage_1-378

  3. To restrict users to upload files of certain MIME types only, unselect the llow all MIME option and specify allowed MIME types in the Allowed Asset MIMEs (regex) fields using regular expressions.

    chlimage_1-379

  4. Click/tap Save to save the changes. If you specify MIME-strings for allowed MIME types, the upload operation fails for any asset with MIME type that doesn’t match the configured MIME strings in these fields.

recommendation-more-help
4452738f-2bdf-4cd4-9b45-905a69d607ad