Access to Jira - not for all

[Mik]

Hi Guys

We have some jira users who using our jira via small application (rest).

We would like block access for these users via web. How we can do it?

I was thinked about write plugin for destroy session in Event

com.atlassian.jira.event.user.UserEventListener

in method

userSignup(UserEvent event)

Does anyones have idea how to do it on another why?

Regards

Mik

[ConradR]

This sounds like a broken concept. Why shouldn't they log in via web? Couldn't you just remove the rights to see specific projects? What does this application do?

If your application uses just some features of the Jira Rest API and you try to restrict access to the other features by some hacking in the login components of the web application, your users still could use a different rest application to use all features.

If your application uses just your own rest functions you could remove the users from jira-users (to prevent the login) and make your function @AnonymousAllowed.