PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchRestrict file access in Atlassian Data Center at two levels: use product permissions to control who can view, upload, or delete content, and use host and database controls to protect the files and data underneath. The exact settings depend on whether you use Jira or Bitbucket and on the deployed version; the Jira and Bitbucket controls below are not interchangeable.
Start with the product, version, and storage location
“Atlassian Data Center” covers multiple products. The procedures here are supported for Jira Data Center and Bitbucket Data Center; they do not establish Confluence Data Center settings. Before changing controls, identify the product and version, which projects or repositories are in scope, and whether attachments are stored locally, on shared storage, or in a supported object-storage configuration.
As an Amazon Associate I earn from qualifying purchases.
Application permissions govern actions through the product. They do not, by themselves, prevent someone with operating-system or database access from reaching underlying data. Conversely, filesystem restrictions must preserve the access the application service account needs.
Restrict file access in Jira Data Center
Jira access is layered. Atlassian describes five security levels: global permissions, project permissions, issue security, comment visibility, and work-log visibility. Configure the broadest relevant access first, then apply narrower controls where needed. See Atlassian’s Jira Data Center 11.0 permissions guide.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
| Control | Scope | What it governs |
|---|---|---|
| Global permissions | Jira instance | Instance-wide capabilities, such as access to Jira functions. |
| Project permissions | Project | Actions such as browsing project issues and managing attachments, as defined by the project’s permission scheme. |
| Issue security | Individual issue | Which users can see an issue within a project. |
| Comment visibility | Individual comment | Who can view a comment. |
| Work-log visibility | Individual work log | Who can view a work log. This does not hide the issue’s time-tracking progress bar. |
Limit who can upload or delete attachments
Attachment creation and deletion are controlled through the project permission scheme. Review every scheme used by the projects in scope, and grant Create attachments only to the intended users, groups, or project roles. Delete own attachments is a separate permission: grant it only if users should be able to remove their own uploads. If users need to attach files while creating issues, verify that the Attachment field is not hidden. The versioned instructions are in Atlassian’s Jira Data Center 10.5 file-attachment guide.
Restrict attachment file types where available
Atlassian’s Jira documentation describes extension allowlist and blocklist restrictions starting with Jira 9.15. An allowlist permits only the listed extensions; a blocklist rejects the listed extensions. Check the documentation and settings for your installed release before relying on this control. Extension filtering helps restrict unwanted file types, but it is not a malware-scanning system.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Protect Jira files and data at the infrastructure layer
Jira’s application permissions do not replace operating-system access controls. Restrict access to Jira’s index and attachments directories to administrators and the Jira service account; the Jira process user needs full access to both directories for normal operation. In production, restrict access to the external database as well. If using Jira’s bundled H2 database, Atlassian says to restrict access to the Jira installation directory while retaining full access for the Jira runtime user. These recommendations are in the Jira Data Center permissions guide.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Jira attachments are not stored in the Jira database, so include the attachment storage location in backup planning rather than assuming a database backup contains the files. Atlassian’s Jira 10.3 documentation describes Amazon S3 attachment storage only for Jira provisioned in AWS, and says it is unsupported for on-premise deployments or customers not running Jira in AWS. Confirm compatibility and configuration requirements for your exact version and deployment before changing storage; see Jira Data Center 10.3 file-attachment documentation.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Review Bitbucket Data Center permissions separately
Bitbucket uses a different permission model from Jira. By default, project permissions are inherited by repositories, and repository administrators can manage repository permissions. Atlassian’s Bitbucket project-permissions guidance says that, starting with Bitbucket 8.8, administrators can restrict repository administrators from managing repository permissions.
That restriction does not automatically change existing repository-level permissions. After enabling it, audit repository grants directly so prior access is not mistaken for having been removed.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Keep Cloud attachment policies separate
Atlassian’s attachment-download policy concerns Jira and Confluence Cloud organization controls and includes plan requirements. It is not a Data Center setting or a universal way to prevent copying: a user who can view content may still be able to save or capture it through other means. Do not apply Cloud policy instructions as if they were Data Center procedures. See Atlassian’s Cloud attachment-download policy.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
