If we follow the instructions on this page to restrict anonymous users' ability to view issues, there doesn't seem to be any way to allow them to post attachments.
Trying to include the attachment field at issue create time results in
{"errorMessages":[],"errors":{"attachment":"Field does not support update 'attachment'"}}And trying to post the attachment after the issue is created (at https://{site}/rest/api/2/issue/{issue}/attachments) results in
{"errorMessages":["Issue does not exist or you do not have permission to see it."],"errors":{}}Removing the issue security allows the user to post the attachment.
Anonymous users can post attachments with the web form, since they can do it at issue creation time.
Other than actually using authentication and not posting anonymously, is there any simple way around this?
