is there any way to exclude a custom field from search index (to prohibit a search by this field)?
I'm evaluating a plugin that implements field security schemes and allows to flexibly restrict access to some fields. Value of a restricted field is correctly shown for users who has access to it (including issue navigator and email notifications) and is hidden from others. But when a users without access to a restricted field search by it with JQL (i.e. "Salary = 1000"), they can 'guess' the value.
You could remove the searcher from the field (go to custom fields, find your field and use "edit" - that allows the name and searcher to be changed)
This will completely remove it from search and sort, globally, not for some users.
If you're using the add-on I think you are, then yes, it's a known weakness that fields are still exposed to search, even if a user has zero access to the field.
Atlassian Summit is an excellent opportunity for in-person support, training, and networking.Learn more
One of the newest products in the Microsoft family - Microsoft Teams, is a chat-based hub for teamwork that integrates all the people, content, and tools your team needs to be more engaged and ...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs