Changelog

All notable changes to Access Auditor for Jira are documented in this file. The format follows Keep a Changelog.

[1.0.0] - 2026-09-12

Added

Initial release of Access Auditor for Jira.
Eight-tab administration app: Overview, Findings, Explorer, Schemes,

Changes, Exports, Settings and Diagnostics.

Twelve finding rules (R1 through R12) covering anonymous or public

access, sensitive permissions granted too broadly, publicly shared filters and dashboards, deactivated accounts that still hold access, oversized or stale administrator groups, unused and near-duplicate permission schemes, projects without issue security, empty administrator roles, project administration held by large groups, custom-field-based grants, and archived projects with broad access.

Standard and strict sensitivity profiles.
Permission Explorer with by-project, by-group and by-user views, showing

the full granted-via chain for every resolved holder.

Permission scheme comparison, including near-duplicate detection with a

match percentage.

Change tracking between consecutive scans, with before → after detail

for changed sharing and changed scheme bindings.

CSV and JSON export for findings, the permission matrix and the change

list, with a clipboard fallback for browsers that block iframe downloads.

Configurable scan frequency, history retention, acknowledgement expiry,

large-group threshold, and project and group exclusion lists.

Diagnostics tab with a capability matrix, an on-demand capability check,

and a support report that excludes personal data and credentials.

Automatic first scan on installation; manual scans thereafter, one at a

time.

Weekly reporting of stored account identifiers to Atlassian, with a rescan

when an account changes and erasure of that account’s history when it is closed. Runs regardless of licence state.

Entirely read-only against Jira: 22 declared scopes, none of them a write,

administration or management scope, and no external egress.