How do I remove the ability for logged out users to see tickets, comment as anonymous?

People who are not logged in can see and comment as anonymous on tickets.  This is a big security risk for us and our clients.  I only want access for logged in users.

I tried in both Safari and an incognito window in Chrome and I am able to see the full ticket without being logged in. 

1 answer

0 vote

Change the permission scheme(s).  Remove the "group" called "anonymous" from all inappropriate permissions 

(Frankly, that's all of them other than "browse" for a start, and "browse = anonymous" is only for certain types of public project too)

I've gone through all of our permissions and none of them allow for "anonymous" or "anyone".

Ok, so can you pick up a demo issue and check with a totally anonymous account? Use a browser you've not logged into your Cloud Jira with ever. (You could post it here to get one of us to check it)

Putting a link here means everyone will have access to all of our projects so even if it's a dummy project, I'd rather not post a link here. Do you have an email I can use?

Completely understand, but I don't share emails in public (so much spam already). Could you try it with a clean browser? If you've got Chrome or Firefox, there's an "anonymous browse" option which will not carry any login details even if you've got a normal session running - that's more than good enough to do this test.

If you can then see the issue without any login, the next step is to be 100% sure there is no "anyone" in the permissions for that one project, then visit https://support.atlassian.com to raise the issue with them. It sounds very broken to me, and quite a security hole, so I'd expect quite a swift response.

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Tuesday in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

236 views 1 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you