Anonymous commented and added attachment

[Viktor Kuzmychov]

Recently an Anonymous placed a comment into an issue, while Add Comments permissions is reduced to only project roles. The comment itself is not visible.

Also Anonymous added attachment, it is still there. Permissions is available to specific project roles also. 

Does anybody know how can this happen? 

[Viktor Kuzmychov]

Anybody else? Any ideas how can this happen? 

[Viktor Kuzmychov]

Anyone? Any suggestions?

[Thomas Schlegel]

Hi Viktor,

I've read your question, but also have no idea, how this can happen.

Are the project itself and the issues visible to "Anyone"?

It would help, if you could post your permission scheme here. 

[Thomas Schlegel]

what happens, if you try to add a comment without being logged in?

[Viktor Kuzmychov]

Hi Thomas, thank you for your reply.

Trying to comment when loggedout

Here is part of permission sheme: