Anonymous User is able to change ticket status.

[Deleted user]

We have permission scheme set , to allow anonymous user browse jira issue, but not to create them or edit them.

But anonymous user is able to change status of ticket.

This is weird because it works correctly for few issue type, but not for all.

* It works fine with issue type : bugs ; Anonymous user not does have permission to change anything on the page.

* But for other issue type : User story, Acceptance criteria : User can change status of the ticket without being logged in.

I found no setting where permission are based on issue type.

[Florin Manaila · Accepted solution]

Sounds like you have conditions that check the user's permissions on your transitions, since different issue types can have different workflows, therefore different transitions with different conditions.