Files are accidently deleted from DP and DB entry is deleted also - Policies fail

[smurf0815]

Hi,
we are experiencing an issue where one of the Site administrators accidentality deleted Packages from the non Cloud Samba DP.
In order to counter that we run a rsync which syncs the Master with the Samba share. But than we have to add the Package once again in jamf Pro cause the entry is no longer there. This also affects the policies which no longer have the Package available.In order to prevent that accidental deletion of files I've removed the delete rights from the API accounts for now. Is it possible to prevent the deletion of the entry in jamf Pro? Or might it be possible to give the delete permission only to certain files for example using a filter?

[HarryStrandJamf]

Ouch. That's unfortunate. I created a Settings view (CMD+comma, different than Setup), that lets you turn off the ability for it to delete files after a synchronization, and that defaults to off. Would it help to make that more granular? So instead of that one option, have one option for the ability to delete files from distribution points (defaulted to off) and another setting to allow removal of package records from Jamf Pro (also defaulted to off), and as long as I'm at it, another one for allowing manual deletions of files from distribution points (defaulted to on) and another setting to allow manual removal of package records from Jamf Pro (defaulted to on)? You would still get the prompts so you can choose with each synchronization or manual deletion if those settings are on, otherwise only applicable prompts would show. Eventually, we could add users, where only admin users would see those settings. Not sure I want to rush into that though. But at least these settings could help with unintentional deletions. Let me know what you think.

[smurf0815]

Thanks, I think this would be great for our use case if you could provide that to us this would help a lot. One follow up to this : Am I right that the API accounts can only upload to Samba shares but not to the Master Distribution Point?

[HarryStrandJamf]

@smurf0815 The API is used to upload the package records, regardless of the distribution point, and the API is used to upload and download files to/from the JCDS distribution point, and to upload files to other types of cloud DP, but only when it is set as the primary distribution point. The API is used to get information about file share distribution points, but it mounts and transfers files directly, not via the API. Does that answer your question?

[smurf0815]

@HarryStrandJamf we use a local DP and have synced from the Master to the smb share which is provided outside as HTTP(S) .

[smurf0815]

@HarryStrandJamf getting back to your earlier reply: Could you provide the Settings view to us? Cause as it seems removing the API delete flag doesn't seem to help :(