We noticed that if a user concurrently takes Excel exports of query results, it causes a huge performance impact. It is normal human behaviour that if a web page does not respond for a certain period, they click whatever the link again & again until it responds. Having the same Excel export request makes causes JIRA freeze after some time.
This seems to be a very easy denial of service attack.
* Is it possible to disable Excel exports globally?
* Is it possible to restrict Excel exports for a particular role?
* Is it possible to limit the number of Excel export requests accepted from server per minute?