How can we restrict access to the monitoring page of Java Melody?

Hello all,

we installed Java Melody for JIRA 6.1.6 and we are really happy about the monitoring it supplies. The problem is, that everyone has access to the monitoring page even if they are not logged in. I could not find a hint how to restrict the access to the pages when Java Melody is used as a plugin for JIRA. So any help from you would be very much appreciated.

Thanks a lot,
Simone

3 answers

did you install it as a war-file inside the tomcat of a jira installation using the installer?

Which kind of setup did you use for Jira? How did you install Java Melody?

Are you using an apache webser with mod_proxy in front of jira?

If you give me more details I can surely help you.

did you install it as a war-file inside the tomcat of a jira installation using the installer?

Which kind of setup did you use for Jira? How did you install Java Melody?

Are you using an apache webser with mod_proxy in front of jira?

If you give me more details I can surely help you.

0 vote
Henning Tietgens Community Champion Aug 07, 2014

Hi,

I have the same problem. We're using Apache2 as a reverse proxy (https) which redirects using ajp protocol to JIRA (standalone). Installation was copying the JavaMelody plugin jar to <tt>atlassian-jira/WEB-INF/lib as described here.</tt>

I added the following to the apache sites file

&lt;Files monitoring&gt;
        Satisfy any
        Order deny,allow
        Deny from all
        Allow from 127.0.0.1

        AuthType Basic
        AuthName "Authorization Required"
        AuthUserFile /etc/apache2/.htpasswd
        Require valid-user
    &lt;/Files&gt;

and restarted apache, but it didn't work.

Any suggestions how to restrict access to /monitoring?

Thanks

Henning

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published yesterday in Agile

What is ChatOps? A guide to its evolution, adoption, and significance

I am the product of AIM. I can hear that door swinging open and closed in my mind with absolute fidelity. I’d recognize that ding anywhere. At 15, as I typed away into AOL IM, I never imagined that ...

47 views 1 6
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you