-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Navigation - Top
-
None
-
24
-
6
Issue Summary
When we directly access the links like https://xxx.atlassian.net/jira/dashboards & https://xxx.atlassian.net/jira/filters then instead of getting redirected to the login page, we are presented with blank screen, of JSW site, and it also ends up showing the Logo that customer have updated under “Look & Feel” settings in JSW cloud, without log in to the site.
Steps to Reproduce
- Logout from your Jira site or access in incognito mode
- Browse the URLs https://xxx.atlassian.net/jira/dashboards, https://xxx.atlassian.net/jira/projects, https://xxx.atlassian.net/jira/filters or specific JQL page https://xxx.atlassian.net/issues/?jql=created%20%3E%3D%20-30d%20order%20by%20created%20DESC
Suggestion
Prevent anonymous users from accessing those pages. Make it so people are redirected to log in instead.
- is duplicated by
-
JRACLOUD-95979 Make Jira project, filter and dashboard list pages not publicly accessible
- Closed
- is related to
-
JRACLOUD-96588 Custom logo displayed for anonymous users
-
- Gathering Impact
-
- relates to
-
JRACLOUD-80562 Restrict "/rest/api/2/dashboard" to only users in the instance and not anonymous users
- Closed