Create subtasks with different permissions

Séb P.
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 20, 2013

Hi All!

let me explain my requirement. I need to create issues in some projects, and add subtasks to it. But I need to restrict people able to see the subtasks (eg. some subtasks have to be processed by a team of my organisation, while others subtasks have to be treated by another team, and each team should not be able to view tasks assigned to others. Subtasks will contains quite sensitive data, and our internal policy tells us not to let people view informations they are not supposed to).

And to make it harder, I need to prevent the parent issue to be closed unless every subtasks are closed (for this, I may use the "Sub-Task Blocking Condition" feature).

Linking issues between projects is not a very good option (it doesn't reflect very well that something is a child of something else, and will prevent the use of the Sub-Task Blocking Condition...)

Is it possible, say, to create several subtasks type and grant access to them depending to a role? I searched for that a bit, but didn't found anything... this would be definitely one of the best solutions...

Have you any (good :-)) idea to make this work that way? I'm open to any suggestion...

Thanks in advance!

3 answers

1 accepted

2 votes
Answer accepted
Ryan Dunn August 20, 2013

Hi there,

So you might want to look at this plugin if you are making heavy use of subtasks:

https://marketplace.atlassian.com/plugins/com.almworks.jira.structure

This will not solve your security concern though.

As you cannot set issue secutiry by issue type. The only way I can think of (without a plugin) to do issue security is by setting the issue security level when you create the subtask here:

https://confluence.atlassian.com/display/JIRA/Configuring+Issue-level+Security

If you want to try something a little hacky check this out:

https://jira.atlassian.com/browse/JRA-5865?focusedCommentId=125615&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-125615

Hope this helps a little.

Cheers,

Ryan

Séb P.
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 21, 2013

Hi,

thank you for your answer!

But won't the subtask inherit the security level of its parent issue? That is the whole problem... The parent task will be almost public, but its subtasks should have different security configuration. That is:

- Parent Task, public readonly
+-- SubTask1, viewable and editable ONLY by team A
+-- SubTask2, viewable and editable ONLY by team B
+-- SubTask3, viewable and editable ONLY by team C or D
...

You were talking about plugins? Do you know any that may help to implement this?

0 votes
Jeffery Bennett March 7, 2016

Hi,

One option might be to base permissions on user groups fields in issues.  This may require some workflow modifications as well as permissions/notifications.

For example, create a custom field called Active User Groups. In the workflow for parent task types, on creation, set this field to be equal to a user group that has the appropriate permissions based on your setup (normally the default JIRA group everyone is added to when their account is created).

For sub-task types, you can manually add other user groups to this field as needed.

Just make sure you configure your permissions and notification schemes so the 'Active User Groups' field has adequate permissions and notifications for your needs.

0 votes
RambanamP
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
August 21, 2013

When creating a sub-task, it automatically inherits the security
level of its parent, check this issue for more information

https://jira.atlassian.com/browse/JRA-5869

Suggest an answer

Log in or Sign up to answer