Youtrack has the feature where attachment URLs are generated with a signature that grant access through a token. They can be shared to those without a login.
Browser copied URLs last 3 days and notification email URLs last 2 weeks.
Documented here: https://www.jetbrains.com/help/youtrack/standalone/Add-an-Attachment.html#links-to-issue-attachments
We would like to disable the token-based access to attachments and always require login. Is there a setting or experimental feature that would accomplish this?
This convenience feature is not intuitive, and seems like it should not be enabled by default, or at least should be removable for security requirements.