Remove the Everyone share option from filters in Jira Data Center

Summary

Prior to Jira 7.2.2, JIRA Administrators do not wish to allow filters to be shared with 'Everyone', as it makes them visible to anonymous (unauthenticated) users. This is due to the fact that you can't disable anonymous access to general pages in JIRA globally.

This behaviour is changed after the implementation of JRASERVER-23255 - Shared filters are visible to anonymous users when shared with 'Everyone' whereby JIRA administrators can now disable the ability to share dashboards and filters publicly (anonymous users) via a new global setting "Public sharing". Please read the description of the Suggestion ticket for more information on this change.

This article is a collection of workarounds that you can use to exclude the sharing of filters with anonymous users in Jira versions prior to 7.2.2. Some of these methods may still work in versions greater than 7.2.2 so you can continue using them, though we recommend just disabling the Public sharing (or equivalent) permission of your Jira application instead.

Solution

There are two possible solutions. They can be used individually or together if both outcomes are required:

a)Remove the option from the drop-down select list

With this solution, the options left for sharing a filter are with a group or project role that the user is a member of. See more details on Sharing a Filter.

b)Restrict access to the page URL for managing filters to only allow authenticated users access.

If an anonymous user attempts to access the page, they will be redirected to the login page.

You may also be interested on this related article:

• How to bulk restrict Filters and Dashboards shared with anyone on the web or logged-in users in Jira

Option A: Remove 'Everyone' option from list

To hide the option 'Everyone' from the list you can either use JavaScript to remove the 'Everyone' option during page load or by modifying the view template file.

⚠️ Please note that either of these methods only hides the option from being displayed in the UI, not the functionality itself. It is still possible to send requests that will share filters with 'Everyone', but it requires more technical expertise than simply using the browser.

Using JavaScript in the Announcement Banner

This solution has been tested on JIRA 7.1.4, and Jira 8.5.0

• Add the following JavaScript to the Announcement BannerNOTE: This will remove the option from filters AND dashboards.

  <script type='text/javascript'> AJS.toInit(function() { var urlPath = $(location).attr('pathname'); console.log(urlPath); if (urlPath.toLowerCase().indexOf("editportalpage") >= 0 || urlPath.toLowerCase().indexOf("editfilter") >= 0 || urlPath.toLowerCase().indexOf("addportalpage") >= 0) { AJS.$("#share_type_selector_viewers option[value='global']").remove(); AJS.$("#share_type_selector option[value='global']").remove(); } }); </script>

Using CSS in the Announcement Banner

An alternative method is to rely on CSS instead of Javascript. This will work regardless of race-conditions on the browser page load but is more sensitive to version updates. These have been validated on Jira 9.4 and 9.11.

They are described in these two Issues:

JRASERVER-65962 - Option to disable "Any logged in user" permission

JRASERVER-69095 - Ability to remove option in user's profile which shares their filters by default with all logged in users

Option B: Restrict access to view shared filters for authenticated users only

ℹ️ This solution has been tested on Jira 7.1.4.

1. Shutdown Jira

2. Edit the actions.xml located in the JIRA-INSTALL/atlassian-jira/WEB-INF/classes directory.

3. Modify the file from:

To:

4. Restart Jira.