JIRA System Dashboard is Displayed When Not Logged In
Symptoms
Currently, a portion of the dashboard shows up prior to logging in. How do I secure my JIRA instance so the system dashboard is only viewable after logging in?
Cause
The Browse Projects permission has Group (Anyone) set. Quite often this an inadvertent result of migrating from JIRA self-hosted to JIRA Cloud. More specifically, when self-hosted, JIRA access was configured to be used by everyone in the organization to minimize account overhead. However, once the data/settings are imported into Cloud, the implications of Group (Anyone) effectively opens up view access to the internet.
Resolution
For the Browse Projects permission, delete Group (Anyone)