Passwords en el ticket JSM+Refined

Question

Estamos buscando una aplicacion addon nativa que permita ofuscar claves para que la gente de soporte al cambiar una clave se la pueda pasar al usuario pero que solamente lo vea él. No tengo Guard para hacer seguridad a ese nivel. El tema es que tenemos Refined.site for JSM y este portal no soporta campos que NO sea nativos de JSM.

O bien alguna metodologia que usen para garantizar la privacidad de las claves que sirvan tanto para JSM como para Refined.

Saludos y se agradece el aporte.

Marc -Devoteam- · Answer

Hi @Sergio Baltazar

Refined is a 3rd party app for theming your JSM portal, all authentication is still base on the Atlassian side.

Refined has no part in this.

Delivering credentials securely is not part of the Atlassian Guard tool, as mentioned by @Arkadiusz Wroblewski

It might be that one a the apps listed could help, check them out.

https://marketplace.atlassian.com/search?query=secure+share&product=jira-service-management&hosting=cloud

Otherwise delivering this information securely to a user should be looked for in an application designed for this.

Arkadiusz Wroblewski · Answer

Hello @Sergio Baltazar

For me JSM + Refined currently makes a secure third-party field impractical, and credentials should be delivered outside the ticket through a proper secret-sharing mechanism. That will be clean solution.

About Guard detect, that's not a missing feature. It's just not working that way, and the design wasn't for such a use case.

Best,

Arek 🤠