is there any way to exclude a custom field from search index (to prohibit a search by this field)?
I'm evaluating a plugin that implements field security schemes and allows to flexibly restrict access to some fields. Value of a restricted field is correctly shown for users who has access to it (including issue navigator and email notifications) and is hidden from others. But when a users without access to a restricted field search by it with JQL (i.e. "Salary = 1000"), they can 'guess' the value.
You could remove the searcher from the field (go to custom fields, find your field and use "edit" - that allows the name and searcher to be changed)
This will completely remove it from search and sort, globally, not for some users.
If you're using the add-on I think you are, then yes, it's a known weakness that fields are still exposed to search, even if a user has zero access to the field.
Hey Atlassian community, I help lead engineering at Sentry, an open-source error-tracking and monitoring tool that integrates with Jira. We started using Jira Software Cloud internally last year, a...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs