Possible to show link issues with security level

With some changes on how we handle logs from our customers, we have made so that some issues are restricted to only the specific customer and a group of employees, we call this issuetype Customer Internal.

Our problem now is that some developers outside of the group are asking for log files because they can't see the linked issue.

So, question is simple, is there a setting or plugin that let's you see that there are a linked issue that you don't have access to? It's actually a bit annoying to have them hidden.

1 answer

0 vote

There's no setting for it - a link that leaks information that the user would not normally able to see is absolutely the wrong thing to do in security terms.

I'm not aware of add-ons that would directly allow you to unsecure your links, but if you've got one of the scripting plugins, or a developer to hand, you could write a derived field that goes off and reads the infromation (pretending to be a privileged user) and exposes it on the issue. 

We don't want them to be able to see the information in the issue, only that the issue exists to begin with.

We do use scriptrunner, I can explore that for showing some information then.

Thanks!

The Scripted field option does mean that you have complete control over what you expose. 

In some cases, it is a security problem for a user to even know there's a link to issue X, but that's not common - the usual problem is that links expose summary and other information.

But with SR, you've complete control over what is ok for you to expose.

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Apr 17, 2018 in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

808 views 2 19
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you