History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: JRA-2367
Type: Improvement Improvement
Status: Resolved Resolved
Resolution: Fixed
Priority: Minor Minor
Assignee: Unassigned
Reporter: Martin Rothbaum
Votes: 112
Watchers: 59
Operations

If you were logged in you would be able to see more operations.
JIRA

Separate "delete attachment" permission

Created: 18/Sep/03 05:18 PM   Updated: 08/Aug/07 11:07 PM
Component/s: Attachments
Affects Version/s: 2.4 Pro, 2.4 Enterprise
Fix Version/s: 3.9

Time Tracking:
Not Specified

Issue Links:
Duplicate
 
Reference

Participants: Adam Cameron, amanda king, Ann-Sophie HOCQ, Christopher Houghten, Darren Srikumpol, David Kropman, Dushan Hanuska [Atlassian], Ernest Wong [Atlassian], Jaap Boersma, James Head, Jan Leger, Kevin Wilson, Martin Rothbaum, Michelle Lorenz, Miro Lehky, Neal Applebaum, Nicolas Grossi, Olle Friman, Ray Oei [Furore], Reinhard Brandstädter, Thiago Rossato, Tim Pettersen [Atlassian], Ubisoft MTL Jira Administrators and Zacharias J. Beckman
Since last comment: 66 weeks, 4 days ago
Resolution Date: 10/Apr/07 04:12 AM
Labels:


 Description  « Hide
Currently, to allow users / project leads etc. to delete attachments, you have to give them the delete issue permission (even in Enterprise version.

Deleting attachments is not a big deal, as doing so leaves an audit trail (in Change History).

However this permission also allows deleting issues completely which removes any audit trail.

An alternate would be to make "delete issue" be a logical delete - ie: flag in the database rather than physically deleting.



 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
Ray Oei [Furore] - 08/Jul/04 06:44 AM
Yes that would be an important improvement.
Same for comments.

Neal Applebaum - 13/May/05 06:44 AM
Since deleting an attachment is a 'permanent' removal of information, much like deleting an issue, I can see how an argument could be made to support the current implementation where user must have issue delete permission to delete an attachment. The problem is where users need to delete attachments they have added themselves - especially where they need to replace a file with the same name (e.g. a sql script) and make sure no-one accidentally reads the old file. Here's an idea that could address all concerns. Anyone who has permission to add an attachment would inherently also have permission to Hide an attachment. Hiding an attachment is different from deleting one in that it is still there, but available for only some to see. The user interface could still say "Delete" so the end user thinks they are deleting it, but it is merely marked as hidden on the issue, so it is still physically there. However, to a user with "Delete Issue" permission (typically an administrator), they would see ALL attachments, including the hidden ones, and be presented with a vsiual cue indicating which ones were marked as deleted, and an option to "Permanently Delete" those attachments. So, to most end users, they can delete attachments, but without the risk of permanently deleting irretrievable information.

Miro Lehky - 25/Aug/05 05:15 PM
I very much like Neal's proposed solution to this issue.

Kevin Wilson - 16/Sep/05 03:40 PM
This is a needed feature in our shop and this would also prompt the need to have user and admin level attachment search ability.

Kevin Wilson - 16/Sep/05 03:45 PM
users may know the name (or part) of a file but not the issue key-# and want to delete the attachment from the issue. currently there isn't any way of locating a issue via an associated attachment name.

Ernest Wong [Atlassian] - 24/Oct/05 01:31 AM
Some feedback from a customer:

Management of attachments is not flexible. You need to give a user the "Delete Issues" permission to be able to manage attahments. A much better solution would be to implement a new permission "Manage Attachments". Today, all our users can add attachments to an issue, but they cannot delete them afterwards.


Darren Srikumpol - 27/Oct/05 03:09 PM
I agree with Ernest, it would be nice if managing attachments was seperate from managing issues, and that we could be flexible and add a higher level of granularity to global permissions.

This seems like a very worthwhile investment and a constant pain that my company sees while using the product. We are at odds in the sense that we need to only show the relevant version of a PRD (product requiement document) rather than 10 versions of a PRD and we are allowing users the ability to completely erase a ticket when we only want to allow them the ability to manage their attachments better.


Miro Lehky - 27/Oct/05 03:30 PM
If a user does delete an attachment, it would be preferable if that attachment was simply tagged hidden instead of actually being deleted.

Darren Srikumpol - 27/Oct/05 03:36 PM
Regardless of it were "hiding" a file or deleting it, a higher level of permission granularity would be a huge upgrade for this particular set of functionality.

Neal Applebaum - 27/Oct/05 03:37 PM
One workaround is to keep attachments on a server, and only include the link in the issue. Of course, that will not work for everyone - the people need access to the link from wherever they are running JIRA from.
See JRA-8258 for some discussion on how to do that.
Unfortunately I can only vote once for this issue

I also thought I created an improvement request months ago to have the issue navigator with a column that identifies which issues have attachments, to work like Microsoft Outlook (and probably other e-mail clients), where you can filter on and sort on issues based on whether they have an attachment or not. A paper clip icon in the column to indicate attachment(s) like Outlook would be great. The "Images" column doesn't accomplish the same thing since all you need is an indicator, and it won't work on non image attachments and you cant filter on it etc.


Nicolas Grossi - 16/Nov/05 09:33 AM
It will be nice to have all delete permission separated too. Now JIRA (3.3.3) only have one delete permission that agroups the posibility to delete attachments,comments and issues. i thinks it will be nice to have these permission separated because now delete opetacion a fisical and not logical

Michelle Lorenz - 19/Dec/05 01:25 PM
One of the things we really wish Jira supported is the ability to manage (your own) comments, attachments, and delete issues as separate permission schemes.

There are already issues created for this so I won't raise a new one, but will briefly comment as to why this is important to us.

Firstly, we don't want to give users 'delete' permissions to delete an issue, only an administrator should ever have permission to permanently delete an issue imho.

However, quite often a user will upload the wrong attachment, or need to replace an attachment, and they then have no way of changing this. This is a problem.

A second problem, is that users will quite often make a typo in the comment, or comment on the wrong issue, and then they have no means of editing or deleting their own comment. This is also a problem.

It would be great to have a separate 'super delete' permission scheme, as well as a 'manage attachments/comments' permission scheme.


Ann-Sophie HOCQ - 08/Feb/06 11:20 AM
Hi,
Many user ask me to delete attachments because of errors or updates.
So I hope that this possibility to give this permission to specifics users will come soon as possible.
Thanks

David Kropman - 19/Apr/06 10:20 PM
We have the same problem. We have had to assign "super-users" throughout the organisation to be able to delete the erronous attachments. We would prefer to have the delete attachment as a seperate role.

Jaap Boersma - 02/Jun/06 04:19 AM
This issue has been around for ages! It's not assigned to anyone, has a very low priority, and has no indication of being fixed at all in the future. From my point of view this is very important: normal users should be able to manager their own attachments, comments, etc.

Please fix this in JIRA's next release!


James Head - 02/Jun/06 04:25 AM
Priority? Come on, - they are developing calendar widgets!! who wants delete attachments??

Reinhard Brandstädter - 02/Jun/06 04:42 AM
Indeed, this issue is very old.

Deleting Issues was one of the first "new features" my users wanted to have after I introduced JIRA in my company! I can't see why this permission should be something very special.

I guess this issue just dissapeared and was not reviewed a long time?


Olle Friman - 30/Jun/06 08:55 AM
My users need the ability to delete their comments, but not to delete their issues. These must be separated in the permission scheme.

Ubisoft MTL Jira Administrators - 03/Oct/06 10:11 AM
No fix version ?

Jan Leger - 17/Oct/06 02:33 PM
Hi, are you'all ever going to add this feature/improvement. The history will capture this info, so there would be record of this deletion. Users could really use it please!

Thiago Rossato - 27/Oct/06 10:22 AM
This is a 3 years old issue that is not so difficult to implement!
Come on guys ... we are waiting for too long!

Zacharias J. Beckman - 13/Nov/06 07:44 AM
This is critical for us. We are experiencing serious "attachment overload" and frankly I'm very, very disappointed that JIRA won't at least allow users to delete their own attachments. Consider all of these problems:
  1. Users upload the wrong file.
  2. Users make a typo in the file comment or name.
  3. A new version of a document needs to be uploaded (this is a big one!).
  4. Information that is confidential needs to be revoked from the site (another big one!).
  5. Older attachments are no longer relevant.

I can't keep up with the pace of "please delete the XYZ attachment" emails I'm getting. And worse, sometimes I go and delete the wrong attachment!

Likewise, I can't give delete permission to users. That's just not allowed in our workflow, it's an administrator role.

In the entire opinion of the users here at Practice Technologies, this is a bug and should be fixed immediately.


Zacharias J. Beckman - 12/Dec/06 02:40 PM
Now we've got a VP in the organization getting involved:

How come we can't delete attachments? This is a big problem for some tickets where people can grab wrong or old information.

This is really a bad situation. It needs to be fixed.


Christopher Houghten - 13/Dec/06 08:52 AM
Hey all -
We wanted the same functionality so I whipped up a plugin based on Philip Herbst's Edit Comment Plugin

Check it out:
http://confluence.atlassian.com/display/JIRAEXT/Edit+Attachment+Plugin

All it does is allow users to delete their own attachments..
Currently it has no "are you sure" dialog or any other confirmation.
No editing of attachments or anything like that.

I will consider adding functionality to the plugin if there is a demand and if the requirements are exceptionaly clearly spelled out.


Adam Cameron - 08/Feb/07 05:00 AM
Hi there.
I have similar requirements for this sort of thing:
  • separate delete permission for issues, comments, attachments.
  • a notion of being able to delete ONE'S OWN issues, comments, attachments as a separate concept to deletions in general.
  • a notion of UPDATING attachments (perhaps not the same as the base issue in question here)

The ability to delete one's own comments is more important to me than the others, but I've just had a chance where one of my middle-level users has attached something to an issue, and now need to update it, but cannot, as it's not apporpriate for that user to be able to delete issues or comments (other than their own ones


amanda king - 03/Apr/07 10:05 AM
Can you tell me the release date for 3.9?

Dushan Hanuska [Atlassian] - 03/Apr/07 08:03 PM
JIRA 3.9 is planned to be released in May.

Tim Pettersen [Atlassian] - 10/Apr/07 04:12 AM
Administrators (as of JIRA 3.9) can now grant users the right to delete their own attachments and to delete others attachments, rather than having a general "create attachments" permission.