is there any way to exclude a custom field from search index (to prohibit a search by this field)?
I'm evaluating a plugin that implements field security schemes and allows to flexibly restrict access to some fields. Value of a restricted field is correctly shown for users who has access to it (including issue navigator and email notifications) and is hidden from others. But when a users without access to a restricted field search by it with JQL (i.e. "Salary = 1000"), they can 'guess' the value.
You could remove the searcher from the field (go to custom fields, find your field and use "edit" - that allows the name and searcher to be changed)
This will completely remove it from search and sort, globally, not for some users.
If you're using the add-on I think you are, then yes, it's a known weakness that fields are still exposed to search, even if a user has zero access to the field.
Atlas Camp is our developer event which will take place in Barcelona, Spain from the 6th -7th of September . This is a great opportunity to meet other developers and get n...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG