Customer Portal-user should not be able to edit own user-details

unknown

Hi Community!

I should be able to prevent Customer Portal-users editing their own user information (e-mailaddress, name, etc.) in our JIRA-instance. If they do, some important functionality would break in this instance.

Can this be done by editing some serverfile, or installing a plug-in?

Thank you & have a nice day!
Stijn

Andy Heinzer

User accounts in Jira have always been able to edit their own account.  Even service desk users can do this.   While there is not a specific setting you can change to prevent this, there might be another way to achieve this.

For example, if you're using a Jira Server platform (not Jira Cloud), you can add to Jira different types of external user directories.  If all these users exist in an LDAP or Active Directory server, then you could connect this to Jira in order to sync the users, their names, email addresses, etc into Jira.  There is an option when connecting these directories to Jira to be Read-only.  In which case, if you were using this, and that directory contained the users in question, then technically Jira itself can't change the user account information in that directory.

But that directory could be changed (by an LDAP administrator) and in turn have those changes synced into Jira.   But this is the only way I can see Jira being able to have all that information, but then not allow the end user to change the data there.