nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Configure JEMH Comment Creation to disregard security

Duncan DAVIES1

Iv had a rather strange request for one of our Queues today, and am not sure whether it is doable in JIRA

I was wondering whether a User could add a comment to an issue (via email) if they don't have the security to see the ticket? Currently when users raise a ticket via email, they often CC other users in, and these users don't get view permissions, but sometimes they respond and there response should be logged as a comment. Even if the Comment is logged under some Anonymous user account, as long as the comment is actually logged correctly

Sorry if that didnt make sense

Thanks

Accepted answers

Renjith Pillai

AFAIK the security permissions are respected while comments are added via emails. So with the default mail handler this may not be possible.

But if these people in Cc are not Jira users, then if defaultReporter is specified in email configuration, Jira actually adds their comments under the name of defaultReporter. A little strange though

JEMH seems to have this functionality https://plugins.atlassian.com/plugins/com.javahollic.jira.jemh-ui

I leave to Andy to comment more.

All comments

Renjith Pillai

AFAIK the security permissions are respected while comments are added via emails. So with the default mail handler this may not be possible.

But if these people in Cc are not Jira users, then if defaultReporter is specified in email configuration, Jira actually adds their comments under the name of defaultReporter. A little strange though

JEMH seems to have this functionality https://plugins.atlassian.com/plugins/com.javahollic.jira.jemh-ui

I leave to Andy to comment more.

Duncan DAVIES1

Hi Renjith

Thanks for the response. I have tried using the defaultReporterUsername option, but it seems to reject the email still if the User is an actual JIRA user who doesn't have permission to comment on the issue - unless i'm using the wrong JEMH property?

Renjith Pillai

May be that is what I wrote in the above comment. If defaultReporter is specified and mail comes from NON-Jira users, it gets added, while it comes from known Jira users without permissions, it is rejected.

Btw, there seems to be another parameter 'defaultReporterOverridesDerivedReporter' which you can use, but the bad part is that all comments may look like it has come from the same originator.

Duncan DAVIES1

Yeah, its just not quite what I am after Renjith

Is it possibly something that could be solved with better security settings? Through the JIRA interface, only specified groups can access the tickets (which I currently have working), but via email, anyone can comment on a ticket (as to comment, they must know about the ticket)

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

jemh