What does "Any logged in or anonymous user can browse this project" mean in this context?

[Rob Horan]

If you see the image below, there is a message in Administer Projects which states "Any logged in or anonymous user can browse this project."  This message appears in several permission-specific sections so I assume it is pertinent to those permissions specifically.  Neither anonymous access nor jira-users access has been associated with these permissions, so why is it showing up in these places?  If I am reading this correctly, Jira is complaining about the project being open to all users who are logged in, as you can see in the Browse Projects section.  If that's the case, why isn't the message in that section, instead of sections where it is not relevant?

[Brant Schroeder · Accepted solution]

Rob,

  You have a group, most likely public, that you have granted access on the default software scheme.  You can click remove to see what group it is that you have granted access and remove it or get a better understanding of why it was granted.  Someone applied it to administer project which I think is a mistake and should be removed.

Additional information about anonymous access can be found here: https://support.atlassian.com/jira-cloud-administration/docs/allow-anonymous-access-to-projects/

[Rob Horan]

Jira-users has browse projects permission.  Wouldn't the message be applicable to Browse projects then?   That group doesn't have admin rights.  My question is why is the message showing in the admin section?

[Brant Schroeder]

Rob,

  If you click remove you can see what group has been granted access, my guess is public. The public group can be applied to any of the permissions on the scheme.  Please click remove to see what it is and if it is public simply remove it.

[Rob Horan]

Oh.

OH SH------------

WOW, thanks!  Now I wonder why that's not shown.  More importantly, for me to find out on my own, how did this even happen??!!!