Uploaded image for project: 'Atlassian Guard'
  1. Atlassian Guard
  2. ACCESS-1480

Deny rendering an organisation’s Smart Link if the user is outside the organisation’s IP allowlist

XMLWordPrintable

    • 1
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Currently, smart links in Confluence and Jira don’t honor IP Allowlist.

      Here’s the scenario

      • have two organizations - Org A has IP allowlist and Org B doesn’t
      • copy and paste an issue link from Org A (either Jira issue or Confluence page) into Org B (either in a Jira issue or Confluence page)
      • a user who’s got access to both sites now accesses site B from an IP address not allowed in Org A’s allowlist.
      • The smart links will still show the following
        • Jira Smart link - Issue key and Summary
        • Confluence Smart link - page title, and when hovering over the smart link, it shows a brief content of the page as well.

      While this is mentioned as part of the IP allowlist exceptions it is a limitation/exception that somewhat defeats the purpose of the IP allowlist (in this edge-case scenario)

      Suggestion

      Include the ability to hide/deny Smart links if viewed from an IP address outside of the IP allowlist (either built-in by default, or via an additional configuration option)

              ecf27a037d15 Aditya Guntupalli
              0b32ff6a00df Dorian Davis
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: