Hello,
We host our own Jira server and are having a problem with about 100'000 bogus users with very long user names, images, etc. These users never log on.We have are removing users by executing SQL statements but new ones keep coming in.
What could be the point of creating such users?
Hi @Ceki Gulcu a couple of questions here:
Thank you for your prompt answer.
> Is Jira connected to an external user directory?
No.
> How are users added or granted application access?
Anyone can browse projects. Users ("project role: users" and the "group: jira-users") can create, comment on and link issues. So users are granted certain rights automatically.
Maybe the project permissions need to be changed?
> Have you enabled public signup and CAPTCHA?
Yes.
> Are users invited through email?
> Are users created automatically?
Is public signup absolutely necessary? What's the reasoning behind this configuration?
The jira server in question is used for open source projects. So, yes, the public signup seems quite necessary.
It looks like you're new here. Sign in or register to get started.