I have a request to create a permission scheme where users can create issues. The issues must be visible on boards etc but comments and attachments fields must be private and viewable only by the assignee, as these fields will contain sensitive customer related information. Is it possible to do this and if so, how can it be done?