We have an on-prem Jira environment where access is granted to everyone to work on multiple issues. Some of the issues have confidential information which does not have access control / Issue-based security. So, anyone in the company can access any issue and view attachments.
We have a requirement to implement access control in Jira so that only limited specified users have access to issues and attachments containing confidential information.
- Our Jira environment contains issues from the last 10 years, so it has a very high number of issues, and contains attachments.
I would like to have your opinion/best practices on the following questions!!!
1- What are the best practices for implementing access controls in Jira?
2- In such a case, What is the best practice to implement access control of previously created Jira issues?
3- How can we automate the process to apply issue-level security / any other access control on all our previous issues?
4- How can we automate the process to move all attachments to OneDrive and provide access to only the Issue assignee? After moving the attachments to OneDrive, it automatically posts the OneDrive link to Jira and grants access only to the assignee.
Looking forward to your response!
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events