Setting a Public Filter to Private

Kevin Pawloski

We have a number of Filters that are set to "Public" that the owner was unaware that setting meant they are public to the entire world. We're trying to change the settings to make them Private, but I keep getting an error that JIRA is unavailable or there "is a glitch" when trying to modify the settings.

Is anyone else having this issue? I figured last night it was due to news of the security incident and JIRA had taken the feature offline, but it's now Saturday and the behavior still persists. 

There's nothing sensitive in our filter, but we'd obviously prefer to not have this information public. Unfortunately I've seen some examples were very sensitive information has been disclosed. 

More context: https://news.ycombinator.com/item?id=20595658

Earl McCutcheon

Hello Kevin, 

In jira when you grant the anyone/everyone permission in various locations such as the project or filters this means everyone that can access the URL endpoint is given permission to that data, and is a method for making the site and data publicly accessible through anonymous access.  On server platforms that are behind a firewall this permission can be used as a method to allow users with access to the local network to see content in Jira and the access controlled by the firewall, however in cloud the site is hosted remotely and the URL is visible publicly, with no firewall restrictions to filter content and is used to allow public access to the site only.

For editing the filters what is the exact error you are getting and are you the filter owner?  Primarily you can only update filters that you have created (you are the filter owner). To edit a filter that was shared with you, you can either clone the shared filter or the filter ownership needs to be changed to you by a Jira administrator, as covered in:

• "Managing shared filters"

Let me know if this is the case or some additional details on the error.

Regards,
Earl