Problem Definition

JIRA protects access to its administrative functions by requiring a secure administration session in order to use the JIRA administration screens, which is known as websudo.) When a JIRA administrator (who is logged into JIRA) attempts to access an administration function, they are prompted to log in again.

However, not every administrative function is protected by websudo, for example, the Audit Log.

Suggested Solution

Enable websudo for every administrative function