issue level security : can UserType-A view secured issues but only UserType-B edit the security?

[Arnold]

I'm new to issue level security, but I've got it working for the first time just now - yay!

I have two issue security levels:

• 'any logged in user' and this is set to any logged in user as you can imagine :)
• 'XYZ personnel only' and this is set to a Project Role 'XYZ personnel'

It seems to work:

• issues set to 'XYZ personnel only':
  • cannot be viewed by a 'normal' user
  • can be viewed by users with the Project Role 'XYZ personnel'
  • So far so good...

But is it possible to configure issue level security so that:

• UserType-A can view issues set to 'XYZ personnel only' but cannot change the issue's security level
• UserType-B (e.g. Project Role 'Administrators') can both view the issues set to 'XYZ personnel only' and edit the security level on the issue

This possible?

[Dave Mathijs · Accepted solution]

Hi @Arnold , yes this is possible based on permissions.

When a user is part of the security level, that user can see the issue.

All other 'operations' are managed by permissions in the permission scheme associated with the project.

[Arnold]

thanks @Dave Mathijs

Ah yeah - got it.

Now my testuser can view secured issues but cannot edit the security level (but can edit other fields as usual)

It's working now :)

Thanks!

For others who are interested in how I got it to work:

Project Admin > Permissions > Set Issue Security = Project Role 'Administrators'

Issue Level Security is as in the original question:  security level = 'XYZ personnel only' can be seen by users with Project Role 'XYZ personnel'

Project Admins can edit an issue's security level

'XYZ personnel' can view a secured issue but cannot edit its security level (the field doesn't appear in the 'Edit Issue' screen).

:)