History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: JRA-9014
Type: New Feature New Feature
Status: Open Open
Priority: Major Major
Assignee: Unassigned
Reporter: James Wong
Votes: 9
Watchers: 8
Operations

If you were logged in you would be able to see more operations.
JIRA

Add "Reporter Group" Permission

Created: 11/Jan/06 03:48 AM   Updated: 31/Oct/07 11:18 PM
Component/s: Permissions Security
Affects Version/s: 3.4.3
Fix Version/s: None

Time Tracking:
Not Specified

Issue Links:
Duplicate
Reference

Participants: Anton Mazkovoi [Atlassian], Benjamin Naftzger [Atlassian], James Wong, Mel Belacel, Neal Applebaum, Nick Menere [Atlassian] and Nick Waanders
Since last comment: 37 weeks, 2 days ago
Labels:


 Description  « Hide
I am currently evaluating Jira and it is the last point to confirm if our company will purchase it.... I would like the permission model supports "Reporter's Group". See the following examples will explain the reason why it is very helpful:

1) We have several products, e.g Product1, Product2 ....
Each product has its own component, version & release note
2) We support several dealers worldwide, e.g. Dealer1, Dealer2, ....
Each dealer is a "User Group" associating with a set of logins
4) We have a central support team for all dealers
5) However, it is critical that dealer should see ONLY his issues but not other dealers' issues

So, I will setup project like
Product 1 Support Area (with all component, version, release note setup properly)
Product 2 Support Area
....
However, the above cannot be achieved because there is no "Reporter's Group" permission for viewing the project

Because of the limitation, I need to create many project like:
Product 1 Support Area for Dealer 1
Product 1 Support Area for Dealer 2
....
Product 2 Support Area for Dealer 1
Product 2 Support Area for Dealer 2
....

And I need to duplicate all component, version & release note info into many projects. Also, the issue finder will be more difficult to use.

In fact, most IT companies have the similar workflow that they have several products & dealers .... but because of the sensivity of sales issues (some business deals cannot be seen by other dealers), all issues should be private to dealer group only. I wish Jira will support this. Many many thks.



 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
Neal Applebaum - 11/Jan/06 10:24 AM
I also have a similar need. There are some issues out there like this (e.g. JRA-3417 and its linked issues, JRA-5276) you might want to look at. A user can belong to any number of groups, so I think in order for "Reporter's group" to work it has to be a new concept - to be able to specify a user's "primary" group to be used for thingd like default comments, permissions, etc. If, when editing users' groups, we could flag a group to be used for this, that would help.

Anton Mazkovoi [Atlassian] - 11/Jan/06 05:20 PM
James,
The exact feature you are after is not available at the moment. There are a few alternatives:
  1. Use Issue Level Security (available in JIRA Enterprise):
    http://www.atlassian.com/software/jira/docs/latest/issue_level_security.html
    With Issue Level Security you can define a Security Level for each customer (based on a user group), and make the field required:
    http://www.atlassian.com/software/jira/docs/latest/issuefield_configuration.html
    so it is always set.
  2. Use the Reporter permission (also available in JIRA Enterprise) and the User Custom Field permission type. This way you can create a Multi User Custom Field and if any user other than the reporter of the issue needs access to the issue add them to the custom field. The problem with this is that you will need to manually add users for each issue, but this will save you from creating a Security Level for each customer. There is a bug that stops this approach from working well at the moment - JRA-8941 - this will be fixed in JIRA 3.5.

I guess the approach you take depends on how often users other than the reporter of the issue need access to an issue.
Thanks,
Anton


Nick Waanders - 12/Jan/06 06:06 PM
I would also like to see this feature implemented - Neal suggested a user's "primary" group - perhaps this could be something like "User's issue security group". I envisage it being used as James described, when external users need to see the issues their colleagues have logged. The "Reporter" issue security level is too restrictive and the other options require too much user administration.

Benjamin Naftzger [Atlassian] - 05/Jun/06 06:30 AM
There is a JIRA Workflow Extension for setting issue security based on a reporters group which may be of interest to those monitoring this issue:

http://confluence.atlassian.com/display/JIRAEXT/Set+security+level+based+on+group


Benjamin Naftzger [Atlassian] - 05/Jun/06 11:49 PM
A suggested solution here is to create a 'Keyword Reporter Group' role-based permission type.

The Keyword Reporter Group permission type would require a keyword to be specified when utilising this permission type e.g 'Customer-'. A permission of this type would grant rights to the group featuring the keyword to which the reporter belonged. For this to work, users would also have to be associated with a single group-type, a group-type that is tied together by a naming convention e.g. 'Customer-X'. Each user could also only be associated with a single group-type. The beauty of using a Keyword over a concept like Primary group allows this to be used across multiple group types that leverage their own naming convention e.g. Customer-, Dealer-, Partner-, etc.

For example, let's say a JIRA Administrator wants to ensure that all users from Customer A can see all Customer A issues and users from Customer B can see all Customer B issues:

1. The user assigns the 'Keyword Reporter Group' role-based permission type, specifying the keyword 'Customer-' for the permission levels Create Issue, Browse Project and Add Comment within their customer facing project.

2. Within JIRA's user management, the JIRA Administrator ensures that all Customer A users are given an appropriate 'Customer-A' group association and that all Customer B users are given an appropriate 'Customer-B' group association.

3. Now when an issue is created by a Customer A user, all other Customer A users will be able to see that issue as they will all share a matching 'Customer-' Keyword Reporter Group: Customer-A.


Benjamin Naftzger [Atlassian] - 06/Jun/06 12:11 AM
The only piece missing from this solution to make it really fly is to somehow allow all users from a single customer to be able to easily sign up to JIRA and then see and comment on all the issues created by the colleagues without having to add each user to the 'Customer-A' group.

I have a feature request (also linked to this issue) to track the development of a possible solution to that problem - 'Dynamic Groups':

http://jira.atlassian.com/browse/JRA-10364


Benjamin Naftzger [Atlassian] - 06/Jun/06 12:12 AM
We should implement this at the same time to create a really superb solution.

Nick Menere [Atlassian] - 06/Jun/06 02:53 AM
Ben,
At the moment (support is an example) reporters have teh ability to edit an issue and add people to the CC field. Once a user is added to the CC field, they have permissions to view, comment.....

Cheers,
Nick


Neal Applebaum - 29/Jul/06 07:43 PM
Is this issue a duplicate of JRA-5509?

Mel Belacel - 31/Oct/07 10:22 AM
Hi,

Is there a plan to implement this? This is a very strong point against the deployment of jira among entities or local groups.

Regards


Nick Menere [Atlassian] - 31/Oct/07 11:18 PM
Hi Mel,

Unfortunately we still can't commit to a date on this issue. There is still the problem of gmail and hotmail users.
For the time being, the CC field is most probably the best workaround we have.

Cheers,
Nick