How to setup issue security level based on business unit

Question

We are looking into setting up issue level security based on the validation whether the checked checkbox on the business unit field matches the security of a user.

Can someone point me in the right direction on how I can set this up?

I am in the 'Add User/Group/Project Role to Issue Security Level' but I do not see an option to select the Business Unit criteria there.

Nic Brough -Adaptavist- · Answer

No, it will not work, because your "business unit" field has nothing to do with people or their accounts.  It's just a list that has no link to people.

You will need to set up groups of people to represent the business units (or roles, but you'll find groups more intuitive)

Daniel Roukema · Answer

Hi Nic, thanks for your answer. I am still unsure how to fix this. Basically what I need to do is to make sure that someone who belongs to a certain Business Unit cannot view issues of other business units.

The way I wanted to set this up was to add all business units under the Business Unit field and then based on whether your business unit is checked you will be able to view an issue.

Will this work or do you have another suggestion on how to set this up?

Nic Brough -Adaptavist- · Answer

Your "business unit" field is a list of options, not users or groups.  It has no logical relationship with people, and security schemes work by knowing that people do or do not have access (by "logical" I mean the information that Jira has - you and I as humans will tend to infer that people belong to a business unit, but computers do not infer information like that, you have to tell them).  Imagine if you renamed "business unit" to "colour" - Jira has the same amount of information about a person belonging to a colour - none.

In order to use a business unit type data for issue level security, you will need to set up groups of people to represent the business units, either as roles in the project or as user groups.  You can then us those either directly in the levels, or via a group-picker.