If I have an Attachment Category configured to be available to a Group, then users not part of that Group can only work with the Uncategorised attachments - BUT they can still see the entries for the attachments in the History and Activity tabs of the Issue.
While this information is limited to showing the user that added the attachment and the filename, the intention is that users outside the allowed Group should not know that the attachment exists.
The attachment also appears as a link in the History and Activity tabs and the unauthorised user is able to download the file. The file is empty when they try to open it which is good but we would prefer all entries associated with attachments only be viewable by authorised users.
So is this functionality under development or already available and I just haven't figured out how to use it?
Regards, Scott
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.