Is it possible to restrict issue access based on a value in a custom field?


I've created a custom field called Company, which is populated with our client company name's. Basically I am looking to give some form of read only access to my clients, but they should only be able to see issues that relate to their company only. So i am wondering if I can restrict access to issues in a project based on the value in the company custom field?


1 answer

1 accepted

0 vote

Sort of, but not really.

There are a few ways to approach restricting individual issues (e.g. using "only the person who raised this issue can see it") but what you really need here is "issue security"

This enables a "security level" that you can set on an issue. If it's blank, then just the project "who can browse" determines visibility, but if you set it to another level, you get to define rules. The more simple rules might be "Top Secret can only be seen by group X", or "Confidential can only be seen by people in the role of Y, and people in group X"

At that level, you'd have some pain, because you'd have to set up a security level for each value in the company custom field.

But... Security levels include rules like "is in custom field", which could solve this for you - you'd only need two security levels - "public (empty value)" and "private (determined by your field)".

That only works for select lists though, and if your company field is text, you'll need a different approach - set up the security levels, then write logic to read the company field and set the security level in a listener.

Thanks for the response Nic. Sounds like I can'tr really achieve what I'm looking for, so it is probably best I extract info out and build some form of webpage to display semi-static data. It doesn't need to be real-time and will probably suffice in most cases. Cheers.

Not without a bit of code or thought (using the right type of field and/or maintaining groups)

Hello Nic,

I have exactly the same issue here and even following your guide,  I cannot resolve it. Probably I'm doing something wrong, so please help.

The issue:

Just like in the question above, I have a field called "Customer" with values: CUSTOMER1, CUSTOMER2 and CUSTOMER3 (all capitals)

  1. I created a group called customer1
  2. I'm assigning "John Doe" who is registered JIRA user to the group customer1
  3. I navigate to JIRA Administration -> Issue security schemes -> "My security scheme" and I'm creating Security Level CUSTOMER1.
  4. I add to the Security Level CUSTOMER1 "Group custom field value" Customer (the name of my custom field)
  5. I navigate to my project -> Settings -> Issue Security and I can see the Security Level I created e.g. CUSTOMER1
  6. I login with the accoutnt John Doe, which has a restricted access to only browse the project, but I can still see the issues with value in "Customer" field CUSTOMER2, CUSTOMER3 and the goal is John Doe to be able to see only issues with the value in the field "Customer" = CUSTOMER1

What the hell I'm doing wrong? =(

I will highly appreciate your help!

Thank you in advance!


We have to solve this same problem.  Can someone comment on this if you have been successful setting this up, please?


Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Apr 17, 2018 in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

795 views 2 19
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you