Possible to show link issues with security level

With some changes on how we handle logs from our customers, we have made so that some issues are restricted to only the specific customer and a group of employees, we call this issuetype Customer Internal.

Our problem now is that some developers outside of the group are asking for log files because they can't see the linked issue.

So, question is simple, is there a setting or plugin that let's you see that there are a linked issue that you don't have access to? It's actually a bit annoying to have them hidden.

1 answer

This widget could not be displayed.

There's no setting for it - a link that leaks information that the user would not normally able to see is absolutely the wrong thing to do in security terms.

I'm not aware of add-ons that would directly allow you to unsecure your links, but if you've got one of the scripting plugins, or a developer to hand, you could write a derived field that goes off and reads the infromation (pretending to be a privileged user) and exposes it on the issue. 

We don't want them to be able to see the information in the issue, only that the issue exists to begin with.

We do use scriptrunner, I can explore that for showing some information then.

Thanks!

The Scripted field option does mean that you have complete control over what you expose. 

In some cases, it is a security problem for a user to even know there's a link to issue X, but that's not common - the usual problem is that links expose summary and other information.

But with SR, you've complete control over what is ok for you to expose.

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Tuesday in Jira

What modern development practices are at the heart of how your team delivers software?

Hey Community mates! Claire here from the Software Product Marketing team. We all know software development changes rapidly, and it's often tough to keep up. But from our research, we've found the h...

209 views 1 3
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you