How to prevent users from creating shared filters in the "List" tab of a project

[Andreas Nägeli]

In the new "List" tab of a project, users can create a custom filter and save it - this will create a filter that is shared with all users of this project. This creates two issues:

1. Users are probably unaware that they created a shared filter and expect it to be private by default.
2. Admins cannot prevent this functionality for users with read-only permissions on the project.

So my product suggestion would be to either make those filters private by default, or add a project-level permission to disable this functionality for a given role.

[Marc - Devoteam · Accepted solution]

Hi @Andreas Nägeli 

Welcome to the community.

Check the Default user preferences setting in Jira administration.

There you can specify what the default preference of Default sharing for filters and dashboards.

They are probably set the the option public, change this to private, then when saving a filter this is always private to the user.

[Andreas Nägeli]

Thanks, I did not know those settings. Nevertheless, "Default sharing for filters and dashboards" is set to "Private". It also behaves this way everywhere, just not in the "List" module. As far as I see it, this was an intentional decision done by Atlassian to create the filters like this.

[Marc - Devoteam]

Hi @Andreas Nägeli 

You are referring to a filter on a Business project correct?

Filter you create on the list or board, can be set with sharing options, like on a software project.

See, https://support.atlassian.com/jira-software-cloud/docs/save-your-filters-in-business-projects/ 

[Andreas Nägeli]

Yes, exactly those. The documentation states "Your saved filter will be at the top of the Filters dropdown of whichever view you’re in.". It does not state, that they are automatically shared with all other users of this project. I still fail to see how to configure Jira to not share them automatically. Yes, we can remove the permissions afterwards via the filters list and menu, but I would like to prevent them from being created already shared.

[Marc - Devoteam]

Hi @Andreas Nägeli 

This is, as far as I know not an option.

But it is stated in the article, in the section, under the first blue note, it states: You can also view saved filters created by your teammates"

You can reach out to Atlassian Support

[Nikola Perisic]

Welcome @Andreas Nägeli 

You need to check your Share dashboards and filters global permission to which groups it has been assigned to, and also check if it has Any logged in user or Public. Both are a security risk. 

[Andreas Nägeli]

It is fine that the user has the global permission to share a filter. But it is bad that creating a filter from the list module will automatically share it, and even worse, display it in the list module. This is not the expectation of the user (which I now can tell from three different users being unaware).