How to enable anonymous Remote/REST API in Jira

[bposner]

I have a plugin which enables a custom field to query back to the Jira Remote/REST API. This works fine when the user creating the Issue with the custom field is authenticated. However, when I enable anonymous Issue creation, the REST calls from the custom field plugin return a 401 (Unauthorized). How do I enable anonymous access to the REST services in Jira?

Browser JS Console shows the following:

1. GET http://slce02cn07.us.oracle.com:8080/rest/keplerrominfo/databasecf/latest/modifyDepFields/newvalues?decorator=none&changedfield=customfield_10007&selectedvalues=customfield_10008%3A%7Ccustomfield_10007%3A&_=1348682343770 401 (Unauthorized) batch.js:4

1. GET http://slce02cn07.us.oracle.com:8080/rest/keplerrominfo/databasecf/latest/modifyDepFields/newvalues?decorator=none&changedfield=customfield_10008&selectedvalues=customfield_10008%3A%7Ccustomfield_10007%3A&_=1348682343776 401 (Unauthorized) batch.js:4

1. GET http://slce02cn07.us.oracle.com:8080/rest/keplerrominfo/databasecf/latest/modifyDepFields/newvalues?decorator=none&changedfield=customfield_10007&selectedvalues=customfield_10008%3A%7Ccustomfield_10007%3ACAF&_=1348682346657 401 (Unauthorized)

[bposner · Accepted solution]

I believe that one needs to at @AllowAnonymous annotation to the implementation in order to allow this. It does not seem to be configurable.

[Florin Manaila]

That is correct and has been introduced in our latest release.

Regards,

Florin.

[Florin Manaila]

Hi,

You can try to set the Browse issue permission to group Anyone.

Regards,

Florin.

[bposner]

Thank you for that suggestion. I didn't find a Browse Issue permission, but did apply Anyone to the Browse Project permission. Unfortunately, the behavior with regard to this issue was not resolved, although much more System Dashboard was shown to the anonymous users...