Attachments added via the REST API are not visible to other users

Ed Adjei

Hi All,

 

When I add an issue with attachments using the REST API, other members of my team cannot see the attachments when they go into JIRA. When I log into JIRA, I can see the attachments fine.

 

Has anyone else experienced this or know a solution? I have a feeling it might be something to do with the level of permissions, but why JIRA allows the text of the issue to be visible but then hides the attachments is beyond me.

 

Regards.

Ed

Andy Heinzer

Hi Ed,

I too am scratching my head at this one.  At first I thought this might be a difference between either a next gen project and a Classic project in Jira Cloud, but I don't see any difference in the way attachments are presented in these two.

It could be different in a Jira Service Desk project, but only in regards to what Agents and other licensed users see vs what customers can see in the customer portal.  In those cases, the customer portal does not show all attachments to the issue unless the agent's share them with the user.

But from looking up your account, I don't believe your site is even using Service Desk here.

There should be no difference between uploading an attachment in the web vs via REST API.   Jira does not natively have field level security, so I can't see a way for only you to be able to see attachments via the permissions and then restrict other users.  If they can browse the same issue as you, they should also be able to see the same fields including attachments.

Are these users looking at these issues directly (under a /browse/{ISSUEKEY} link for example)?   Or are they trying to look at the issues on a board of some kind?

I have come across particular workflow properties that might be able to restrict which users can see/edit/add attachments when an issue is in a current status, However this would apply to the workflow in use for that project, and would not be dependent upon REST uploads vs web uploads.

 

Have you tried to upload attachments in the web instead?  Are these other users able to see these?

What specific REST API endpoint are you using to upload these attachments?  I ask because there is a v2 and a v3 set of REST endpoints for Jira Cloud right now. I'm curious to learn which you might be using here in case there is something different between the two. 

 

Is the issue in question publicly available?  I'm just curious to learn if perhaps the end users that can't see these attachments are logged into Jira or not.  If the issue was public, these users might not have to login to see the issue.  Just curious if we can learn more here.

Andy