To able to hide the "Attachments" section from Jira-user based on their group in JIRA 4.3.4

Hello everyone,

I have a problem or a case.

To able to hide the "Attachments" section from Jira-user based on their group.

Example: "company-users" group can view attachments section while " external - users" group cannot.

I solved part of problem.(java script solving),But Attachments seems in activity-stream.(Activity Tabs (All,Comments,History,Activity,Transitions )) I didnt solve this part.

Where can I find " Activity Tabs (All,Comments,History,Activity,Transitions ) "file-directory in Jira 4.3.4 ?
I found some files.I configurated these files.But, I think, these files is not true file.

MyGoal is to make configuration this or these files.

Because,I don't want to view attachments are coming in activity(History)
I only wonder, what is directory of file or files. I will configure it.
IS it possible, can you say ?

Thanks in advance ...

3 answers

1 vote
Boris Berenberg Community Champion Aug 18, 2012

Hey there,

This is not possible within JIRA as you are describing it. We have an open issue where customers have asked for this feature here: https://jira.atlassian.com/browse/JRA-6185

If you read the first response, Atlassian actually does something similar by using different issue types for internal and external issues. Scott wrote:

"We do this in our support system by having an issue type that is for private support requests, and only the user and support people can view that issue.

Then we delete an attachments, and make the issue public again. You can do that with issue level security if you want also."

Cheers,
Boris Berenberg
Atlassian Support - San Francisco
Enjoyed the support?! Tweet us! #atlassiansupport

Hello,

I modified some files in Jira 4.3.4 Folder and It is working.

Development files : view-attachment.jsp and action.jsp

Kind Regards,

thanks,,

Hi Coskun,

Would it be possible to share your javascript changes in a patch file ?

Thanks

Hi, not sure if you are still looking but I have a plugin that I think should be able to do this. It's called Document Vault (https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault) and is an independent attachments system within JIRA.

Access can be confined to a group of users and/or Issue reporter and/or assignee. Unauthorised users are not able to view the attachments and the attachments related comment. There is also a project level search page to view attachments (that you are authorised to see) within the project. I am also open to suggestions if there is particular functionality you want added.

Does the plugin allow for the security on attachments to be applied for certain projects or issue types only?

Hi Benu, no the plugin does not let you specify that it is only for specific project or issue types. I'll add it to the list of things to do.

Hi Benu, Got a bit of free time and have added the features you asked for. You can set Document Vault to be active for only particular project and optionally for Issue Types within those projects. Let me know if you have any problems.

Thanks for the updated version Paul. I am able to activate the plugin for a project / issuetype, but I don't want to restrict it to same group of users for multiple projects. Also it will be nice to be able to hide only certain types/categories of attachments on the issue. Thanks again!

Hi Benu. For user access if you use the current Document Vault group and restrict users access to projects you should be able to provide the appropriate level of access. At this stage I don't have time to implement groups at the project level, as this would also mean replicating the reporter, assignee and creator access. I put this down as something to look at in the future. As for the types of files that would be part of the blacklist/whitelist functionality in the main configuration that would need to be copied down to the project level. This I'll also add to my list of things to do. Not sure on a timeline for either of these.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published yesterday in Jira Service Desk

Wy are we still using email for Service Desk workflows?

...attest to the experience of an urgent approval that gets lost in the boss’s inbox and requires that special “Please Approve” email or text message. In an age where we have distributed teams...

114 views 0 2
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you