How do you hide work logs from clients?

[Hugo Winder]

Hi!

How do you or would you hide the work logs from clients? Currently, we work with tempo timesheets. I've disabled all the work log rights for my clients' user group, though still they receive e-mail updates and see the work logs under the 'all' tab in an issue. 

How would I completely disable this?

Thanks!

[Jack Brickey]

If a user can browse issues then they have access to all of the details comments, history, work logs etc. So the only way to hide that information is to not provide browse access in the project.

[Hugo Winder]

In that case they would lose access to the boards and backlogs right?

[Jack Brickey]

Yes

[Linda Milne_Togetha Group_]

We are having exactly the same problem at the moment. We have used a combination of 2 two projects, and issue level security in one of them. The first project is the tasks to be worked on and shared, with everyone having access. The second is mostly an internal tracking project, with some tasks that need to be assigned to the client - no time is logged against client issues, and the client cant see the issues we are logging time to.

Pretty clunky and causing us a little grief, so a solution that allows us to specifically limit who can see worklogs anywhere would certainly be preferred. I think this will become a more pressing issue for many before too long.

[Martin Kovalcik]

In our organization, we have two different Jira projects - one for communication with the customer (without work logs) and another for implementation tasks for internal employees with work logs. The customer does not have access to this second one.

[Hugo Winder]

That could be an idea, maybe we can automate the creation of the issues in the "shadow" project and link them. As long as the client has no access to the extra project, the link would be invisible for them but provide easy access to the team. 

[Tempo Support]

Hi Hugo,

If you are referring the All tab in Jira issue view, this belongs to Jira that currently Tempo does not have access.

What Tempo does is for all worklogs that are created via Tempo, they will show as Tempo Timesheet author. For more information about this behaviour, please see the link https://tempo-io.atlassian.net/wiki/spaces/KB/pages/488931333/Why+do+the+worklogs+appear+with+the+author+Tempo+Timesheets+instead+of+the+user+s+name

Best regards,

Chih from Tempo Support

[Andreas Springer {Actonic}]

@Hugo Winder, you should probably set up a team inside Tempo Timesheets for all individuals working in this project, both internal and external. Then you can create different roles for internal and external people and grant them different permissions to be able or unable to view team logs as described here: https://help.tempo.io/cloud/en/tempo-timesheets/permissions-in-tempo/tempo-team-permissions.html

Hope this helps.

By the way, this is a requirement we have often received for our own app Report Builder and we will be implementing this in the near future. If you have any other special requirements, we would be happy to put them in as well, in case you are able and willing to try out another solution. Feel free to contact me for details. Sorry, had to mention it. ;)

[Mykenna Cepek]

@Andreas Springer {Actonic}: Did you see my notes reproducing the visibility of logged work under the "All" tab of an issue, even when Tempo permissions were disabled for the user?

[Andreas Springer {Actonic}]

Yes, but "View All Worklogs" is different from "View team worklogs", isn't it? I could be wrong...

[Mykenna Cepek]

Those two settings probably are different. My point is that both were disabled, and worklog entries were still visible.

[Andreas Springer {Actonic}]

Right, I didn't realize that. In this case I agree that it seems to be a bug.

[Mykenna Cepek]

In my experience, the Tempo "View All Worklogs" permission will control whether I can see all the worklogs for everyone, or just my worklogs.

@Hugo Winder Can you share the setting that you are using for that Tempo permission? It's in the Permission Scheme for the Project(s) of interest. For any Groups or Roles listed in that setting, please also clarify if the "clients' user group" is part of that Group or Role.

[Hugo Winder]

These are my time tracking permissions, the project role 'Clients' is not in here. 

Hopefully you have an idea

[Mykenna Cepek]

Huh. I was able to verify that logged time is visible under the "All" tab on an issue, even if the "View All Worklogs" Tempo permission is not granted to a user:

@Hugo Winder:  I would recommend that you report this as a bug to Tempo Support, and see what they have to say. It's possible they might not be able to fix it (if that worklog entry handling is too deep in Jira).

https://marketplace.atlassian.com/apps/6572/tempo-timesheets-time-tracking-reports?hosting=cloud&tab=support

Click on "Submit a support request".

[Mykenna Cepek]

@Dariya Chernologova mentioned the "Tempo Timesheets Access in Global Permissions in Jira". I checked that setting related to my test above. My test user did NOT have that either, and their logged time WAS shown as illustrated above.

So I continue to suggest that this is a bug. Logged time is visible, even with all available permissions in Tempo removed for a user.

[Dariya Chernologova]

Yes, true. Looks more like a bug because the theoretical solution is not applicable or leading to desired outcome. 

Interesting to know if there's still a fix to this. Maybe support team will suggest something. 

[Mykenna Cepek]

@Tempo Support confirmed what I outlined in my answer here:

• Jira internals force Tempo to show logged time under the "All" tab. On the positive side, you can't see who logged time, but you can see that time was logged.
• As for this seeming to violate the Tempo permissions granted for the user who should not be able to see those worklogs, the link provided by @Tempo Support says "...we may be breaking the View All Worklog permission...".

Sounds like Tempo is classifying it as a "known limitation" (due to Jira requirements) rather than a bug.

I really like the Tempo product overall, so I don't mean to sound negative about it here. Jira users generally tend to ignore the "All" tab on issues anyway. But if you have a hard requirement to not expose that data at all, this might be a problem.

[Tempo Support]

Hi Mykenna,

At this moment, Tempo synchronizes worklogs data back to Jira when users log time via Tempo.

Jira handles the All tab in Jira Issue view and decides what to display.

Best regards,

Chih from Tempo Support

[AKBAR]

Hey @Hugo Winder 

There are a few points that provide access to Work logs. 

• Project permission scheme - View all Work logs, Edit all Work logs, Delete all Work logs permissions will allow to view the Work logs.
• Tempo Permissions - View & Manage Team Work logs, Approve Team Work logs. 

Please verify these 2 aspects for a Company managed project category. 

Cheers,

Akbar. 

[Jack Brickey]

Hi @AKBAR , I haven't seen View all Work logs as an independent permission. Here is what I observe...

[Hugo Winder]

Hi @AKBAR

Looks like these are all in place as they should be. 

[Jack Brickey]

yes. my point is that AFAIK there is no "view" worklogs permission. "Browse" is what governs the ability to view worklogs entries.

[Radka Svobodova]

There is view worklogs permission on the system settings level, there you have to exclude their group, not only on the level of project permissions.

[Hugo Winder]

Hi @Radka Svobodova

Do you know what the setting is called?

[Dariya Chernologova]

@Hugo Winder It might be Tempo Timesheets Access in Global Permissions in Jira. Otherwise you will have to go through the setup in Tempo specifically. 

[Jack Brickey]

yes. that is specific to Tempo.

[AKBAR]

 Dear @Jack Brickey  U didn't find the ''View all Worklogs'' permission because you may not be having the Tempo App installed. [My guess]

[Radka Svobodova]

@Hugo Winder System settings->global permissions-> access all worklogs and view all worklogs