# Activating user authentication for file upload on Talend JobServer

Activate user authentication to restrict the permission of uploading files to Talend JobServer to authenticated users only.

## Before you begin

* Download and apply the R2022-09 monthly update patch on Talend Administration Center and Talend Studio.

  * For further information about applying a monthly patch for Talend Studio, see [Updating Studio](https://help.qlik.com/talend/r/en-US/Cloud/installation-guide-windows/updating-talend-studio).
  * For further information about how to update Talend Administration Center, see [Checking for updates](https://help.qlik.com/talend/r/en-US/8.0/administration-center-user-guide/checking-for-updates).

  If this is the first time you apply a patch, learn about the best practice by following [Testing and applying a Talend Studio monthly update](https://help.qlik.com/talend/en-US/installation-guide-windows/8.0/best-practice-testing-talend-studio-monthly-update "Before installing a monthly update on your Talend Studio and migrating your projects to a newer version on the production branch, it is recommended to test project migration on testing branches first to keep your production branch safe.").

* Download and apply the following patches on each Talend JobServer.

  * 8.0: [TPS-5360](https://help.qlik.com/talend/r/en-US/8.0/tps-5360)

  For information about how to obtain the patches, reach out to your Support contact with the patch numbers above.

* Global protection for authentication to Talend JobServer must have been activated. For instructions, see previous sections [Enabling user authentication for Talend Studio local projects](https://help.qlik.com/talend/en-US/installation-guide-windows/8.0/enable-user-authentication-for-talend-studio-local-projects) and [Configure user authentication for Talend Studio remote projects and Job Conductor using Talend Administration Center](https://help.qlik.com/talend/en-US/installation-guide-windows/8.0/configure-user-authentication-for-talend-studio-remote-projects-and-job-conductor-using-talend-administration-center "Talend JobServer uses Talend Administration Center based authentication for Talend Studio remote projects and for the Job Conductor in Talend Administration Center.").

Backward compatibility: Existing configurations for Talend Studio, Talend Administration Center, and Talend JobServer remain compatible after applying these patches.

## Procedure

1. Stop Talend Studio and enable this feature in Talend Studio.

   Open the <Studio\_installation>/Talend-Studio-\*.ini file, add the following line:
   ```
   -Dorg.talend.remote.jobserver.client.old=false
   ```
2. Stop Talend Administration Center and enable this feature in it.

   Open the TAC\_installation/apache-tomcat/bin/setenv.sh or the TAC\_installation/apache-tomcat/bin/setenv.bat file, add the following system property to the JAVA\_OPTS variable.
   ```
   org.talend.remote.jobserver.client.old
   ```

   This should make the JAVA\_OPTS line look like:
   ```
   export JAVA_OPTS="$JAVA_OPTS -Xmx4096m -Dfile.encoding=UTF-8 -Dorg.talend.remote.jobserver.client.old=false"
   ```
3. Restart Talend Studio and Talend Administration Center.

   The servers may report exceptions because Talend Studio and Talend Administration Center attempt to use the new protocol before reverting to the legacy protocol. However, all Jobs continue to run successfully.
4. Stop your Talend JobServer and enable this feature on this server side.

   Open the <JobServer\_installation>/conf/TalendJobServer.properties file to add the following line:
   ```
   org.talend.remote.jobserver.commons.config.JobServerConfiguration.FILESERVER_AUTHORIZATION=true
   ```