Filter names visible

[Rahul Aich [Nagra]]

HI

Our JIRA instance is accesible by our customers and we have issue level security to restrict what gets seen by our customers.

However, if any end-user creates a filter and accidently shares it with everyone then the filter name becomes searchable to the customers.

I understand when customers click on the filter it returns no results, but we do not want those filter names to even come up in filter searches for customers.

Right now we have around 300 filters which is shared to everyone.

How do we fix this?

Rahul

[Nic Brough -Adaptavist-]

Manually - you're going to need to change the shares from "everyone" to something more restrictive.

The problem here is that Jira has no way of knowing what filters you might want to hide, and is relying on your users who define them to know who they should be restricted to. If they put in the wrong thing, you're stuck.

The closest I got to a fix for this was a minor hack in the .vm that controlled sharing, one that removed "everyone" as an option for sharing.

[Rahul Aich [Nagra]]

Thanks Nic, is there a way we can automatically make it more restrictive i.e. some script or something.

Manually going into each filter 300 times is time consuming.

Thanks for your quick response.

Rahul

[Nic Brough -Adaptavist-]

I think you might be able to add some javascript that might remove "everyone" as an option, but I don't know javascript well enough (as I mentioned, I did it by hacking a .vm).

That's only half the answer though - it'll stop new ones being set up, but not the 300 existing problem ones. For those, I'm a bit stuck - I *think* I'd look at the script runner to find and remove all the "anyone" shares from the filters, but I don't know if it could be done!

[Jobin Kuruvilla [Adaptavist]]

There is no permissions around filters except for the restriction a user adds during sharing but you can decide who can share filters. I think it is more like granting admin rights. People should be careful about who they share stuff with.

[Ritchie Gu]

Hi, I tried the above changes as well as https://confluence.atlassian.com/jirakb/how-to-remove-the-everyone-share-option-from-filters-boards-301663662.html in JIRA 7, it didn't work for me.

My guess is the warning message some kind of locked up the ability of modifying this jsp file?

[Evangelos Vrocharis]

Indeed this has stopped working in JIRA 7 unfortunately. I wonder why that is. If anyone manages to make it work let us know!

[Jenny Bellas]

Also found that this fix is not working for us in JIRA 7. Anyone fins a fix yet?

[Gavad Khan (PS)]

I have tested below steps and it is working fine for me with JIRA 6.3.8. Might be helpful for you.

Remove "Everyone" & selected groups (jira-users, jira-developers, confluence-users, stash-users, Sapies, Clients, inactive-users, Atlassian Tools Support) from Filters/Boards share option

• Stop JIRA
• Replace the following content in "<JIRA_TOMCAT_DIR>/atlassian-jira/template/aui/edit-share-types.jsp" file:

          FROM

<select class="select medium-field" id="share_type_selector">

                        <ww:iterator value=".">

                            <option value="<ww:property value="./shareType"/>"><ww:property value="./shareTypeLabel"/></option>

                        </ww:iterator>

                    </select>

                    <ww:iterator value="." status="'typeStatus'">

                        <span id="share_<ww:property value="./shareType"/>" <ww:if test="@typeStatus/first == false">style="display:none"</ww:if>>

                            <ww:property value="./shareTypeEditor" escape="false"/>

                            <ww:if test="./addButtonNeeded == true">

                                <span class="addShare" id="share_add_<ww:property value="./shareType"/>"><span class="icon jira-icon-add"></span> <ww:text name="'common.sharing.add.share'"/> </span>

                            </ww:if>

                        </span>

                    </ww:iterator>

          TO

<select class="select medium-field" id="share_type_selector">

                        <ww:iterator value=".">

  <ww:if test="./shareTypeLabel != 'Everyone'">

  <option value="<ww:property value="./shareType"/>"><ww:property value="./shareTypeLabel"/></option>

  </ww:if>

                        </ww:iterator>

                    </select>

                    <ww:iterator value="." status="'typeStatus'">

                        <span id="share_<ww:property value="./shareType"/>" <ww:if test="@typeStatus/first == false">style="display:none"</ww:if>>

                            <ww:property value="./shareTypeEditor" escape="false"/>

                            <ww:if test="./shareTypeLabel != 'Everyone'">

  <ww:if test="./addButtonNeeded == true">

  <span class="addShare" id="share_add_<ww:property value="./shareType"/>"><span class="icon jira-icon-add"></span> <ww:text name="'common.sharing.add.share'"/></span>

  </ww:if>

  </ww:if>

                        </span>

                    </ww:iterator>

• Save & close edit-share-types.jsp file.
• Replace the following content in "<JIRA_TOMCAT_DIR>/atlassian-jira/WEB-INF/classes/templates/jira/sharing/share-type-group-selector.vm" file:

          FROM

#set( $egroup = $textutils.htmlEncode(${group}) )

    <option value="${egroup}">${egroup}</option>

#end

          TO

#set( $egroup = $textutils.htmlEncode(${group}) )

  #if ($egroup != "jira-users" && $egroup != "jira-developers" && $egroup != "confluence-users" && $egroup != "stash-users" && $egroup != "inactive-users" && $egroup != "Sapies" && $egroup != "Clients" && $egroup != "Atlassian Tools Support")

  <option value="${egroup}">${egroup}</option>

  #end

#end

• Save & close share-type-group-selector.vm file.
• Remove the content from "<JIRA_TOMCAT_DIR>/work" directory.
• Start JIRA.