I am wondering if it is possible to let customers to fetch their issues details via API?
Is there any security risk ?
Any advise would be appreciated
Hi @Duy Tran Quang ,
It's impossible to do it because they must authenticate as a licensed user, as @Alex Koxaras mentioned. For example, they have to access as Jira administrator. Documentation for API is located here, so you can check for every method what permissions are needed.
What is your use case? Could you please describe it?
I'm not sure if it's possible, due to the fact that authentication is needed. But let's say that you provide an authentication token to your customers. This means, that they could have access to all information. I wouldn't suggest that.
An alternative would be to buy an app, like this, and let them export them whenever they want. Visible will be only the info they provided and statuses.