Hi,
Our organization provides software support to a number of separate customers in Jira Service Desk. Currently, for all of our customers, we require that a user create an individual account to be able to log in and view tickets in their Portal. The customers in each Jira Project are only able to view their organization's tickets as a security measure.
We're working with another customer to take over their application support, which is supplied to thousands of users, so forcing all of them to create individual Customer accounts isn't practical. I am trying to determine what risks we may encounter by opening up a specific portal to allow any user to create a ticket without an account.
- If one Project/Portal out of many is fully "open", will this customer or our other customers be able to view tickets in our other customers' Projects?
- With an "open" portal, I assume that anyone who might find the portal link, or have the ticket submission email, would be able to create a ticket? I'm worried about spam in this case.
- Is this against best practice in any way, or are there any other tips/experiences that we should keep in mind?
Thank you for any insight/help!!
Jordan
