Can you allow anyone on the internet to upload attachments to a JIRA project accessible by anyone?

Question

I have created a JIRA project that can be accessed by anyone on the web. I have also assigned the permissions create and delete own attachments to any user on the web too. However, when trying to upload an attachment, I receive the following error: "You are not authorized, session has expired or connection is lost". Has anyone received this before or know how I can resolve this problem? The end goal is to allow any one on the web without a JIRA account to upload an attachment when submitting a ticket. Thank you!

Christian Sprenger · Answer

One of the many known Bugs in JIRA

[JRASERVER-71212] While uploading an attachment during issue creation as anonymous user throws an error saying "You are not authorized, the session has expired or connection is lost." - Create and track feature requests for Atlassian products.

One of the many which will not get a fix, as Atlassian does not do JIRA Server anymore.

raj-kumar2 · Answer

Hi Nasar,

You can give them a direct url for the project as below. Make sure, its HTTPS in the url not HTTP

https://yourjira.com/secure/CreateIssue.jspa?pid=XXXX&issuetype=XX

Users should be able to create issues with attachments. Kindly give it a try and let me know for any query.

Note: If you are not running your Jira over SSL, it will throw error for anonymous users.

Nic Brough -Adaptavist- · Answer

Technically, there's something wrong and you'll need to look at the logs on both ends to see what it is.

However, do not do this.  Allowing anonymous users to write to your Jira is going to fail you soon.  You will be attacked with virus-ridden uploads and spam quite soon.