user restrict access as per Work type (issue type)

[Harshad Prajapati]

Hi 

I have created different work type in jira as below 

1) Bug

2) Task 

3) Security Fix

4) Story 

Now i need to access for small group of users for "Security Fix" work type 

Can you please provide step by step detail that would be helpful 

Thanks,

Harshad

[Harshad Prajapati]

Hi Enric , thanks for details step 

But these "Security Fix" work type tickets should not visible to all user ,  only one or two user group can view those tickets 

How can we do this  and it is based on work type (Security Fix")

Thanks,

Harshad

[Enric Font]

Dear @Harshad Prajapati 

1. Create a security group

Create Jira group security-fix-users

2. Create a Work item / Issue security scheme

Go to: Jira settings → Work items → Work item security schemes → Add work item security scheme

Name it, for example:

Security Fix Visibility Scheme

3. Add a security level

Inside the scheme, add a level:

Security Fix Restricted

Add only:

• security-fix-users
• plus Jira admins / project admins if needed

4. Associate the scheme with your project

Go to the target project/space settings and associate this security scheme with that project.

5. Add the Security field to screens/layout

Make sure the Security or Work item security field is available on the create/edit/view layout or screen for the project. Atlassian notes that spaces need the work item security field included to use these schemes

6. Automatically apply security level for “Security Fix”

Create an automation rule:

Project settings → Automation → Create rule

Rule:

Trigger: Work item created
Condition: Work type / Issue type = Security Fix
Action: Edit work item
Field: Security Level
Value: Security Fix Restricted

This ensures every new Security Fix item is hidden from users outside the allowed group.

7. Update existing Security Fix items

Use Jira bulk change:

Filters → Advanced issue search
JQL: project = ABC AND issuetype = "Security Fix"
Bulk change → Edit issues → Security Level = Security Fix Restricted

[Harshad Prajapati]

Hi Enric , thanks for details step 

But these "Security Fix" work type tickets should not visible to all user ,  only one or two user group can view those tickets 

How can we do this  and it is based on work type (Security Fix")

Thanks,

Harshad

[Enric Font]

Dear @Harshad Prajapati 

This can be done with security levels (https://confluence.atlassian.com/adminjiraserver/configuring-issue-level-security-938847117.html). 

Security Fix work items must have the security level Security Fix Restricted. Then only members with permissions can see this work items.