Hi,
I see unusual activity in our JIRA instance, logged in ‘Activity Stream’ (around 03.00 last night).
There are 'Anonymous Users ’ activities, which is extremely sensitive since our instance does NOT grant anonymous users access.
-------------------------------------------------------
Today
Anonymous User
moved <.....> in <.....> upwards under
5 hours ago
------------------------------------------------------
The only way I believe this could have happened is if a ‘JIRA Administrator ’ has granted access to anonymous users.
Can anybody help with other possible scenarios why 'Anonymous User' activity would show in 'Activity Stream' even if there is no Anyone group assigned for any permission in any permission scheme?
Kind Regards,
Carmen Sirbu
Hi All,
I would like to add that we installed 'Traceability Matrix and Link Graph' plug-in last week and since then we see logged activity with anonymous user for this plugin as well:
2014-11-03 23:26:28,914 http-bio-80-exec-61 INFO anonymous
/s/en_GB-8agyhr-1988229788/6256/27/3.1/_/download/resources/com.kostebekteknoloji.plugins.jira.jira-traceability-matrix:issueRelationGraphiewIssue-css/$req.contextPath/download/resources/com.kostebekteknoloji.plugins.jira.jira-traceability-matrix:jira-report-plugin-resources/images/error-icon.png [plugin.webresource.servlet.PluginResourceDownload] Could not locate resource: /download/resources/com.kostebekteknoloji.plugins.jira.jira-traceability-matrix:issueRelationGraphiewIssue-css/$req.contextPath/download/resources/com.kostebekteknoloji.plugins.jira.jira-traceability-matrix:jira-report-plugin-resources/images/error-icon.png
I recognized the IP belongs to a user, and normally all his activities are logged with his username.
What I don't understand is why there are 'anonymous' activities since we did not allow that(at least that's what we thought).
Any help is appreciated.
Kind Regards,
Carmen Sirbu
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.