In this page is describe how Atlassian use Jira for its own support :
https://confluence.atlassian.com/display/Support/How+Atlassian+Uses+JIRA+for+Support
The section about "Issue Security" is not clear : By using a "User Picker" field for "CC users", it allows anybody who can create an issue to access to the whole user database (login, first and last name). Isn't it a "Security Issue" as well ? Is it possible to have similar feature by typing (without autocomplete) user emails ?
How can we autorise a user to share its issue with other users without infringe sensible informations (our customer names) ?
Thanks for your details of how you insure security.
Regards,
Pierre Carlier