nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do you hide work logs from clients?

Hugo Winder

Hi!

How do you or would you hide the work logs from clients? Currently, we work with tempo timesheets. I've disabled all the work log rights for my clients' user group, though still they receive e-mail updates and see the work logs under the 'all' tab in an issue.

How would I completely disable this?

Thanks!

Comments

Jack Brickey

If a user can browse issues then they have access to all of the details comments, history, work logs etc. So the only way to hide that information is to not provide browse access in the project.

Martin Kovalcik

In our organization, we have two different Jira projects - one for communication with the customer (without work logs) and another for implementation tasks for internal employees with work logs. The customer does not have access to this second one.

Hugo Winder

In that case they would lose access to the boards and backlogs right?

AKBAR_vb5daf

Hey @Hugo Winder

There are a few points that provide access to Work logs.

Project permission scheme - View all Work logs, Edit all Work logs, Delete all Work logs permissions will allow to view the Work logs.
Tempo Permissions - View & Manage Team Work logs, Approve Team Work logs.

Please verify these 2 aspects for a Company managed project category.

Cheers,

Akbar.

Jack Brickey

Yes

Jack Brickey

Hi @AKBAR , I haven't seen View all Work logs as an independent permission. Here is what I observe...

Hugo Winder

That could be an idea, maybe we can automate the creation of the issues in the "shadow" project and link them. As long as the client has no access to the extra project, the link would be invisible for them but provide easy access to the team.

Hugo Winder

Hi @AKBAR

Looks like these are all in place as they should be.

Screenshot 2022-02-10 at 14.22.32.png

Jack Brickey

yes. my point is that AFAIK there is no "view" worklogs permission. "Browse" is what governs the ability to view worklogs entries.

Mykenna Cepek

In my experience, the Tempo "View All Worklogs" permission will control whether I can see all the worklogs for everyone, or just my worklogs.

@Hugo Winder Can you share the setting that you are using for that Tempo permission? It's in the Permission Scheme for the Project(s) of interest. For any Groups or Roles listed in that setting, please also clarify if the "clients' user group" is part of that Group or Role.

Hugo Winder

These are my time tracking permissions, the project role 'Clients' is not in here.

Screenshot 2022-02-10 at 15.03.03.png

Hopefully you have an idea

Mykenna Cepek

Huh. I was able to verify that logged time is visible under the "All" tab on an issue, even if the "View All Worklogs" Tempo permission is not granted to a user:

Screen Shot 2022-02-10 at 8.47.01 AM.png

@Hugo Winder: I would recommend that you report this as a bug to Tempo Support, and see what they have to say. It's possible they might not be able to fix it (if that worklog entry handling is too deep in Jira).

https://marketplace.atlassian.com/apps/6572/tempo-timesheets-time-tracking-reports?hosting=cloud&tab=support

Click on "Submit a support request".

Mykenna Cepek

@Dariya Chernologova mentioned the "Tempo Timesheets Access in Global Permissions in Jira". I checked that setting related to my test above. My test user did NOT have that either, and their logged time WAS shown as illustrated above.

So I continue to suggest that this is a bug. Logged time is visible, even with all available permissions in Tempo removed for a user.

Andreas Springer _Seibert Group_

@Hugo Winder, you should probably set up a team inside Tempo Timesheets for all individuals working in this project, both internal and external. Then you can create different roles for internal and external people and grant them different permissions to be able or unable to view team logs as described here: https://help.tempo.io/cloud/en/tempo-timesheets/permissions-in-tempo/tempo-team-permissions.html

Hope this helps.

By the way, this is a requirement we have often received for our own app Report Builder and we will be implementing this in the near future. If you have any other special requirements, we would be happy to put them in as well, in case you are able and willing to try out another solution. Feel free to contact me for details. Sorry, had to mention it.

Mykenna Cepek

@Andreas Springer _Seibert Group_: Did you see my notes reproducing the visibility of logged work under the "All" tab of an issue, even when Tempo permissions were disabled for the user?

Andreas Springer _Seibert Group_

Yes, but "View All Worklogs" is different from "View team worklogs", isn't it? I could be wrong...

Mykenna Cepek

Those two settings probably are different. My point is that both were disabled, and worklog entries were still visible.

Tempo Support

Hi Hugo,

If you are referring the All tab in Jira issue view, this belongs to Jira that currently Tempo does not have access.

What Tempo does is for all worklogs that are created via Tempo, they will show as Tempo Timesheet author. For more information about this behaviour, please see the link https://tempo-io.atlassian.net/wiki/spaces/KB/pages/488931333/Why+do+the+worklogs+appear+with+the+author+Tempo+Timesheets+instead+of+the+user+s+name

Best regards,

Chih from Tempo Support

Linda Milne_Togetha Group_

We are having exactly the same problem at the moment. We have used a combination of 2 two projects, and issue level security in one of them. The first project is the tasks to be worked on and shared, with everyone having access. The second is mostly an internal tracking project, with some tasks that need to be assigned to the client - no time is logged against client issues, and the client cant see the issues we are logging time to.

Pretty clunky and causing us a little grief, so a solution that allows us to specifically limit who can see worklogs anywhere would certainly be preferred. I think this will become a more pressing issue for many before too long.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

account

permission

external