I dont know why but anonymous users are having access to my on demand jira without being logged in. Also they can comment to issues etc. I looked over the permissions and there is no permission for group "anyone".
so i dont know how to revoke the public access, do you have an idea?
If people can comment/update without being logged in, then you definitely have allowed "anyone" access in the permission scheme. Are you sure you are looking at the right scheme for that project?
Also, the other place people can do this is in the workflow. If you have transitions in your workflow, then by default, ANYONE can use them. Until you explicitly add conditions to them to stop them doing it. I tend to just stick "must be role of user" into every transition to begin with.
It's very common for people to miss this - I didn't realise for the first six or seven workflows I constructed!
This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.Read more
Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs