Issue Details (XML | Word | Printable)

Key: JRA-9997
Type: Improvement Improvement
Status: Open Open
Priority: Major Major
Assignee: Unassigned
Reporter: Kristof Van Cleemput
Votes: 164
Watchers: 72
Operations

If you were logged in you would be able to see more operations.
JIRA

Allow administrators to manage filters owned by other users

Created: 26/Apr/06 08:31 AM   Updated: Wednesday 02:22 PM
Component/s: Administration
Affects Version/s: None
Fix Version/s: None

Time Tracking:
Not Specified

Issue Links:
Duplicate
Reference

Participants: Andreas Deimer, Anil Madhavapeddy, Anton Mazkovoi [Atlassian], Barney Dalton, Bill Lazar, Brad Johnson, Cherly Diaz, Christoph Enzinger, David Coley, David Middleton, Fabio Maulo, Geoff Metselaar, Greta Zimmerman, Jason Alcock, Jeff Dickerson, Jeff Turner [Atlassian], Kola Oyedeji, Kristof Van Cleemput, Logan Shaw, Matt Doar, Maxx Daymon, Michael Dinsmore, Owen Funkhouser, Peter Drosos, Pierrick, Randy Burgess, Ray Oei [Furore], Richard Clark, Robin Palfrey, Thomas Crowder, Thomas Krug, Tido Lorenz and Wayne Koepcke
Since last comment: 6 days ago
Support reference count: 12
Labels:


 Description  « Hide
We have a lot of users who share filters.
The problem is that only the creator can change the filter.
So if you have users that aren't there anymore ....

I think I need a pane were a administrator can manage filters.
=> delete, change, add filter
also change
the creator of the filter (if the user is removed or is to be removed and you want to keep the filter)
the share level of the filter



 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
Anton Mazkovoi [Atlassian] added a comment - 28/Apr/06 04:52 AM
Kristof,

I have updated the summary to make this issue (hopefully) easier to find.

I can see how this would be useful, but please note that we have a lot of feature requests. The way we schedule new features is described here:
http://confluence.atlassian.com/display/DEV/Implementation+of+New+Features+and+Improvements

Is the main porblem that you have filters left over from deleted users?

Thanks,
Anton


Kristof Van Cleemput added a comment - 02/May/06 01:08 AM
Yes, that's the main problem. But the other stuff is also needed.
Especialy if you want to use some of the shared filters on the default dashboard.

I'm aware of the schedule but I think that this particular issue is one thing you missed when implementing filters.
It's strange that nobody asked for this before. This feature shouldn't be a lot of work. Since you can reuse everything from the filters it's just a question of some super rights. Improving this and working it out completely could then be done in some later version. For now I would be greatfull to be able to adjust filters of deleted users. (maybe when deleting a user that has shared filter give the filters to jira-administrator?)


Jeff Turner [Atlassian] added a comment - 16/May/06 02:03 AM
> For now I would be greatfull to be able to adjust filters of deleted users. (maybe when deleting a user that has shared filter give the filters to jira-administrator?)

Dangling subscriptions for deleted users is an old bug that was fixed a while back (JRA-5650). I think (based on JRA-6964) that Admin -> System -> Integrity Checker should clean these up.

Cheers,
Jef


Kristof Van Cleemput added a comment - 16/May/06 02:35 AM
Cleaning it up will cause other problems.
A lot of are users are sharing filters.
So if one of these users who shares filters is deleted then the filter shouldn't be deleted!
I still want that filter. So like I said give the administrator the possibilitie to adjust and give a filter to somebody else

Anton Mazkovoi [Atlassian] added a comment - 16/May/06 02:40 AM
Kristof,

I can see your point. We will leave this issue open to track this enhancement.

Anton


Maxx Daymon added a comment - 23/May/06 11:08 AM
If and admin had the ability to 'take' and 'assign' ownership of a filter, everything else would come along naturally without any special support.

Andreas Deimer added a comment - 02/Jun/06 04:21 AM
We have the same problem with our filters, so I would strongly suggest that (at least) the jira-administrator shall be able to completely manage all shared filters. What I do not understand is that atlassian has created those two global permissions:
  • Create Shared Filter
  • Manage Group Filter Subscriptions

But once the filter is created, no one can get it out of the system lest rename or change it.
There really should be a per-project permission to delete/update/manage the filters.

Please vote for it

Many thanks
Andreas


Pierrick added a comment - 10/Jul/06 09:49 AM
Hi all,

I support this request, that is a need for us too. It would be great if jira's admins could manage filters...
Thaks in advance.
Pierrick.


Randy Burgess added a comment - 14/Nov/06 09:42 AM
Has this been scheduled or has there been any progress made on this? I have filters that hundreds of people are using that I created with an account I now need to get rid of. It would be nice to be able to transfer filters to another account.

Ray Oei [Furore] added a comment - 06/Feb/07 08:43 AM
Yes... need that too.

Thomas Crowder added a comment - 21/Feb/07 08:21 AM
We are finding this issue quite a problem at the moment, as filter subscriptions are being sent out from our UAT Jira instance. We could disable the SMTP server, but this is required for testing. The administrator should at least have the ability to disable subscriptions completely, if not the whole functionality suggested here.

Peter Drosos added a comment - 01/May/07 11:42 AM
We are facing this issue as the number of JIRA users grow in our environment as well.

What is the ETA on delivering this functionality? In the meantime, is there a workaround in place to remedy this issue?


Kola Oyedeji added a comment - 06/Aug/07 06:27 AM
We could really do with this as well. We have a number of shared global filters on our installation. We have since opened it up to a number of our partners and there is no way to prevent these filters from being displayed to them.

Anil Madhavapeddy added a comment - 03/Sep/07 11:17 AM
Our Jira at XenSource has been up for a couple of years now, and the number of shared filters full of crud is a pain to manage. We've got to log in as each individual user (some of whom have left the company) and clean up their filters.

Christoph Enzinger added a comment - 13/Sep/07 05:09 AM
We have the problem that some users created USELESS filters and share them with all others.
Some users created the SAME filter and share them with all others.

The administrator must have the possibility to consolidate the collection of filters.

VOTE FOR IT


Andreas Deimer added a comment - 13/Sep/07 09:51 AM
Guys,
I did some testing and found out that someone could could actually delete or modify a filter created by another user by just copying the "Delete" or "Save" link of any own filter and modifying the URL with the filterId of the other user. The only prerequisite I noticed was that the filter is visible for the own user, e.g. you must be in the same group whom the filter is shared with.

Is that expected behaviour?

I think, with that in mind, it should be fairly easy to just modify managefilters_shared.jsp to show at least the "Delete" link for shared filters.
If one would make some minor modification to ManageFilters.java, it should even be possible to list other users private filters for an Administrator.

Best Regards
Andreas


Jeff Dickerson added a comment - 28/Nov/07 11:32 AM
I did some testing along the same lines as Andreas, and found that security is not enforced on editing shared filters. Even a user who doesn't have the necessary privileges to share filters can do so if they manually enter the necessary URL. While this is relatively difficult to do, it's not impossible. Also, ANY user can edit other's shared filters, simply by changing the ID in the URL. No administrator rights are required. While this doesn't affect any data, it can have the effect of hiding issues from view, either intentionally or unintentionally. This is a security risk, and needs to be fixed!

Logan Shaw added a comment - 14/Jan/08 05:34 PM
The way Jira handles filters right now is not very administrator-friendly. If I want to create a filter for everyone to use, I must create it under one particular user. If that user leaves the company or something, they will still own the filter. A filter for everyone to use (such as one on the dashboard) shouldn't be tied to one particular user.

Also, even worse, if a user creates a filter and shares it with everyone and then leaves the company, the filter is always on the dashboard portal page of public filters, and because that user is gone (and you can't login as them), you can never delete the filter from the main page that everybody sees! (Currently the saved filters portal does not allow the admin to say which filters will be published.) If the user is still at the company, you can figure out who owns the filter and ask them to delete it, but it's annoying as the admin to have to contact people and ask them to do trivial stuff.


Brad Johnson added a comment - 03/Feb/08 07:22 PM
How will we know if/when this is on the roadmap and when we can expect this to be implemented?

Geoff Metselaar added a comment - 04/Feb/08 09:30 AM
Atlassian - can we please have some action on this.

Anton Mazkovoi [Atlassian] added a comment - 06/Feb/08 01:11 AM
Hi,

We are working on JRA-2509, adding ability to share dashboards, for JIRA 4.0.

As part of this work we are also introducing the concept of Favourite Filters. This will allow each user to choose which filters they would like to see on various pages, such as Manage Filters page, and will solve the problem of overwhelming number of shared filters turning up everywhere in the interface.

At the moment we do not have an implementation date for this feature, however we hope that Favourite Filters will help here. For more information on the way new features are scheduled please have a look at:
http://confluence.atlassian.com/display/DEV/Implementation+of+New+Features+and+Improvements

Cheers,
Anton


David Middleton added a comment - 04/Mar/08 05:07 AM
This is becoming a real administrative burden for us. Please allow Admins to unshare filters.

Richard Clark added a comment - 18/Apr/08 06:16 AM
Out of interest, it's possible to re-assign filters to new users by changing the value of the Authorname column in the searchrequest table (JIRA v3.11). We've used this successfully to re-allocate filters.

Note there's also a Username column on the searchrequest table which is sometimes completed and also needs to be updated (this may be related to upgrading from an older JIRA version).


Matt Doar added a comment - 18/Apr/08 11:35 AM
Yes. I've tweaked that field before, and then you have to reindex, right? I believe the Username column is used to restrict who can see the filter, i.e. sharing. If the username is that same as the authorname then the filter is private.

Jason Alcock added a comment - 02/Jun/08 01:55 PM
The inability of an Administrator to edit or delete a shared filter feels like a very odd design decision.

David Coley added a comment - 03/Jun/08 06:25 AM
It is very important for companies to be able to easily remove filters (with out going into the data base).

Reality is: People leave companies. Developers leave projects. They do not clean up their own messes.


Fabio Maulo added a comment - 09/Jul/08 09:22 AM
I have 2 saved filter working on very old versions (3 years ago) and I can't remove it from the main page.
Check how appear the main page http://jira.nhibernate.org/secure/Dashboard.jspa (actual version is NH2.0.0).

What mean "Administrator" if he can't administer ?

A mitigate way between delete a filter and remove it from main page can be : FilterSharedLevel

FilterSharedLevel : Personal | Group | Global

The admin can't remove the filter created by a user but he can change the FilterSharedLevel.
Saved filters appear using FilterSharedLevel.


Greta Zimmerman added a comment - 10/Jul/08 12:56 PM
This is not a minor inconvenience, but I see it was first reported in 2006. It is now 2008. We've only been using Jira for a few months. We've already got everyone's screens cluttered up with 5 filters written by an employee who has left the company. Please bump this up in priority.

Tido Lorenz added a comment - 24/Jul/08 07:19 AM - edited
Would be great to be able to do it. I can't help someone right now because I don't have any possibility.

Cherly Diaz added a comment - 07/Aug/08 12:24 PM
It would be nice to have a way to at least delete all the subscriptions for a disabled user.

Here's the scenario that we came across.

  • User has subscriptions and is using company email address
  • User leaves company. Disable the user's account
  • User subscriptions still being sent to the users' email address
    • Mail server still processing these subscriptions - even though the contents of the email show no issues

Some user's have lots of subscriptions and it is a bit tedious to go and delete them all.

Alternatively, we could change the user's email address to use a fake address, but the mail server would still try and send these.


Robin Palfrey added a comment - 09/Aug/08 09:20 AM
This has become an issue for our company too and I see no reason, technical or otherwise, why administrators should not be able to modify, delete or remove sharing of global filters. Let's get some more votes for this item!

Thomas Krug added a comment - 11/Aug/08 06:10 AM
I opend a support case and requested an escalation. Maybe there is a product manager who can take this on.
Vote is set

Bill Lazar added a comment - 14/Aug/08 09:48 PM
Greta's comment is our feeling exactly.

Additionally we would like to be able to unshare a filter without deleting it. Even if you log in as the user you cannot (directly do this)!


Barney Dalton added a comment - 26/Aug/08 12:44 PM
Is there a workaround for this? We need a way of updating a filter for a user that has left. To add to the challenge their login has been removed from Active Directory so its difficult impersonate their login.

Owen Funkhouser added a comment - 30/Sep/08 04:54 PM - edited
Please fix this, the backdoor no longer works!

Kristof Van Cleemput added a comment - 01/Oct/08 01:53 AM
If 160 admins think this is needed. Then either you fix the damn thing or you wait a little longer 'till everybody switches to another app. It's not a good policy to make admin's mad. If 160 companies paying a license fee is not enough money then I don't think paypal will do it. I guess they only do stuff for enterprise and not prof. So 1 needs to upgrade to enterprise and get this fixed.
Or wait another 2 years and hope this #@# bug gets fixed

Fabio Maulo added a comment - 01/Oct/08 09:50 AM
I think we must take it easy...
I ""solve"" it removing the SavedFilters-Portlet from the DashBoard... at the end all pre-defined issue-filters are pretty enough.