I'm following JIRA applications performance tuning. There is a point "Replace jira-users with the 'Anyone' permission". Is there easy way to verify that my legacy jira instance doesn't have 'Anyone' set in one of permission scheme?
Global permissions doesn't contain that group but I would like to get deeper understading.
Hi Marcin,
You'll want to check your permissions schemes for the use of the "Anyone" or "Any logged in user" values too.
In JIRA Server, you can query to the database to check for this. The table is called "schemepermissions." The permission schemes themselves are in the "permissionscheme" table.
This isn't what I expected, but it looks like "Anyone" or "Any logged in user" may be treated as a record with a null value in the "perm_parameter" column. (I did a search for the string "any" and found no results.)
Try a MYSQL query like this one:
select * from schemepermissions where (perm_type = "applicationrole" or perm_type = "group") and perm_parameter is null
Then, you can use the "scheme" column to further investigate the scheme by ID.
In the browser, append it to the URL or simply query the db.
In JIRA Cloud, I think you'll have to open each scheme and do a CTRL-F (browser find) for the string: any.
Hope this helps!
Rachel Wright
Hi Rachel,
In my company we've got EOL JIRA 6.3.12 in which this findings is appliable in different way. In my case all "Anyone" are stored in DB as perm_type = "group" and perm_parameter is null.
select * from schemepermissions where perm_type = 'group' and perm_parameter is null;
Thank you for your input.
Marcin
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Thanks Marcin, I had a bug in my query. I updated it.
Have a lovely day!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I had to use "applicationRole" in Jira 8.20.2 for the query to work. R is capital letter.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.