We have an on-prem Jira environment where access is granted to everyone to work on multiple issues. Some of the issues have confidential information which does not have access control / Issue-based security. So, anyone in the company can access any issue and view attachments.
We have a requirement to implement access control in Jira so that only limited specified users have access to issues and attachments containing confidential information.
- Our Jira environment contains issues from the last 10 years, so it has a very high number of issues, and contains attachments.
I would like to have your opinion/best practices on the following questions!!!
1- What are the best practices for implementing access controls in Jira?
2- In such a case, What is the best practice to implement access control of previously created Jira issues?
3- How can we automate the process to apply issue-level security / any other access control on all our previous issues?
4- How can we automate the process to move all attachments to OneDrive and provide access to only the Issue assignee? After moving the attachments to OneDrive, it automatically posts the OneDrive link to Jira and grants access only to the assignee.
Looking forward to your response!
Hello Atlassian Community! Feedback from customers like you has helped us shape and improve Jira Software. As Head of Product, Jira Software, I wanted to take this opportunity to share an update on...