How to disable anonymous access?

[Ian Sherwood]

I recently had JIRA updated to v4.4.1#660-r161644

Now, people can access my JIRA site without logging in. As you can imagine, this is very urgent.

I've done a quick search (and will do more) but wanted to get the question out.

Thanks for any help and suggestions

[Jobin Kuruvilla [Adaptavist] · Accepted solution]

Who can login to JIRA is driven by global permissions. But who sees what is driven by project permissions and this can be different for different projects.

Hopefully more restrictions on the latter will prevent your Anonymous access issue.

[Ian Sherwood]

Yes, it was under permissions. Thanks

[Ian Sherwood]

The group "Anyone" was added to every permission in my system. Apparently this happened during an upgrade on Saturday. If you are receving an upgrade, be sure to check your permissions after the upgrade.

[Jo-Anne MacLeod]

You're on a hosted JIRA installation?

I take it that you just deleted the group?

[Jo-Anne MacLeod]

gross, but at least you know where the problem was. I think that I would have simply deleted the entire group rather than modify all of the permission schemes, especially as you weren't using it before.

Did you ask Atlassian about this change and why it was done?

[Ian Sherwood]

Yes, it's hosted. I removed the group from all places where it gave too much access (pretty much everywhere)

[Ian Sherwood]

I have a support ticket open and you can bet I'll be asking.

[Jo-Anne MacLeod]

check your settings under the Global Settings to see if anything changed there.