Guest user unable to browse artifacts
Hello,
I am checking the permissions to a private project with public pipeline enabled and I am facing an issue where through regular steps, CI/CD > Pipelines or CI/CD > Jobs, a Guest user is unable to browse artifacts.
If I use a direct link to the job or through the latest job URL, like https://example.com/namespace/project/-/jobs/artifacts/master/browse?job=build the user is able to browse artifacts files.
This make me think that it is either a bug with the UI that prevents access trough regular step or a security issue where a guest user should not be able to browse the artifacts and in the same way view the job log output.
This was checked from Gitlab CE 11.0.1+ and on Gitlab.com.