Upload attachment in public forms

[Mario Beigel]

Is it possible to upload data in a form if I restrict the access with IP adresses?

[Benjamin · Accepted solution]

HI @Mario Beigel ,

Welcome! Logically, I don't see how is that possible to upload or access the site if the IP address is restricted. Plus, if you have already setup strict authentication policies, that will also provide an extra layer of protection. 

[Mario Beigel]

We want to use the form internally and out IT department can provide a whiteliste of IP adresses on campus. With that the access would be ristricted and therefore the question is if that is enough to enable the upload of documents in the form itself. The people who will enter data do not have an Jira account.

[Benjamin]

Hi @Mario Beigel ,

They need a Jira account unless you allow them to publicly get on the system. However, they would remain anonymous and that could be a security issue. Not knowing who uploaded the file and if there's anything harmful in those attachment, no one would know who exactly upload the documents and access Jira. 

[Mario Beigel]

Thank you, I guess we just have to accept that we will not be able to get attachenments from public forms. Giving everyone a Jira account is not possible for us.

[Benjamin]

HI @Mario Beigel 

You welcome. you may want to look into Jira Service Management product instead. The license is counted for users are are working on the form and issues. Those who are submitting can be given a customer account and that doesn't take a license seat and you can have as many customer users as you need. Give a go and try it out. You can try a free version to see if it fits your needs.

[Olha Yevdokymova_SaaSJet]

Hi @Mario Beigel 
Great question! At the moment, native Jira public forms do not support file uploads, even if you restrict access using IP allowlists. That restriction is in place to avoid potential security risks with unauthenticated users — and unfortunately, the IP restriction doesn’t lift that limitation.

If you're looking for a way to collect attachments from external users securely, you might want to explore an add-on like Smart Forms for Jira. It allows you to:

✅ Enable file uploads on public forms
✅ Share forms securely via link, QR code, or website embed
✅ Collect submissions from both licensed and unlicensed users
✅ Apply additional controls like domain restrictions

So yes, it is possible — just not with Jira’s built-in functionality (yet).