nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to disable anonymous access?

Ian Sherwood

I recently had JIRA updated to v4.4.1#660-r161644

Now, people can access my JIRA site without logging in. As you can imagine, this is very urgent.

I've done a quick search (and will do more) but wanted to get the question out.

Thanks for any help and suggestions

Accepted answers

Jobin Kuruvilla [Adaptavist]

Who can login to JIRA is driven by global permissions. But who sees what is driven by project permissions and this can be different for different projects.

Hopefully more restrictions on the latter will prevent your Anonymous access issue.

All comments

Jo-Anne MacLeod

check your settings under the Global Settings to see if anything changed there.

Jobin Kuruvilla [Adaptavist]

Who can login to JIRA is driven by global permissions. But who sees what is driven by project permissions and this can be different for different projects.

Hopefully more restrictions on the latter will prevent your Anonymous access issue.

Ian Sherwood

Yes, it was under permissions. Thanks

Ian Sherwood

The group "Anyone" was added to every permission in my system. Apparently this happened during an upgrade on Saturday. If you are receving an upgrade, be sure to check your permissions after the upgrade.

Jo-Anne MacLeod

You're on a hosted JIRA installation?

I take it that you just deleted the group?

Jo-Anne MacLeod

gross, but at least you know where the problem was. I think that I would have simply deleted the entire group rather than modify all of the permission schemes, especially as you weren't using it before.

Did you ask Atlassian about this change and why it was done?

Ian Sherwood

Yes, it's hosted. I removed the group from all places where it gave too much access (pretty much everywhere)