Page History

...

• Database:
  • If you are using an external database as recommended for production systems (i.e. you are not using the JIRA's internal/bundled HSQL database that is bundled with JIRA Standalone), you should restrict access to the database that your JIRA instance uses.
  • If you are using the embedded JIRA's internal/bundled HSQL database that is bundled with JIRA Standalone, you should restrict access to the directory in which you installed JIRA. (Note that the user which your JIRA instance is running as will require full access to this directory.)
• File system — you should restrict access to the following directories (but note that the user which your JIRA instance is running as will require full access to these directories):
  • Index directory
  • Attachments directory
• SSL — if you are running your JIRA instance over the Internet, you may want to consider using SSL.

...