Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,298,337
Community Members
 
Community Events
165
Community Groups

Client user can see, and add, internal notes

We found out recently that a client user of our JSM product can read and add internal comments intended for our team only.

The user needs to be able to see all tickets for their company (they can), whether they created them or not, but should NOT be able to read or create internal comments. In this screenshot, you can see that the user created the original ticket, and was able to add an internal note. He should be able to reply to the previous comment, but only publicly.

 

Internal Comment.jpg

 

1 answer

0 votes
Jack Brickey Community Leader Jun 15, 2021

I think this is JSM not JSW. Can you confirm? 

In JSM if the user has a license to access the application then they will see internal and public comments. The only way to hide internal comments from a user is if that user is a customer do you not have access to the application as an agent does. 

Hi Jack, I am having this same issue with the same setup. I can confirm the customers having issues are only JSM customers and do not have a JSM license nor added via the agent center. The customer was able to add an internal comment via the JSM portal. I look forward to hearing from you.

 

Nicholas

Jack Brickey Community Leader Sep 14, 2021

If what you have conveyed is true then this would be a bug. Simply put Customers cannot make/see internal comments unless the also happen to have a Jira user license as well and further the are in a group/role that has browse and comment permissions on said project. 

I would love to see a screenshot of where a customer is making a comment and then another screenshot that shows it as an internal message. Ultimately if it is happening as you state then you need to reach out to Atlassian support directly to have them login and have a look.

Thank you Jack, I am going to reach out to Atlassian to further investigate this.

Jack Brickey Community Leader Sep 14, 2021

Please share any results here.

How did it all end?

Was looking around to see if Atlassian has fixed the Browse Project Permission to view customer comments and not internal team comments, but it's still a problem. 

 

I found this if you guys want to follow too: 

https://jira.atlassian.com/browse/JSDCLOUD-3392

https://jira.atlassian.com/browse/JSDCLOUD-829

 

Hide internal notes from specific project roles. I'm all for this, because of the amount of times i get from team managers saying they want to see all their teams tickets in advance search and not able too unless they are added as participant. BUT if i get them browse project permission they can see internal notes. Big flaw, IMO. 

 

Hope this steers some of you to vote on this and get Atlassian to implement it!

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you