Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-15160

Bamboo Messages are visible in JIRA Activity Stream for all Users

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Unresolved
    • None
    • JIRA integration
    • None
    • 0
    • 2

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Bamboo Messages are visible in JIRA Activity Stream for all Users

      There is no way to restrict Bamboo Messages in JIRA Activity Stream for certain groups. For us this is a problem as our external customers can see messages they should'nt.

      We have a workaround as we filter out the bamboo messages in the Standard JIRA Dashboard. But unfortunately the customer can create their own dashboards and use the Activity Stream without filter. In our opinion it must be possible to filter the messages on bamboo side. With confluence the restriction of the activity stream works as expected.

            [BAM-15160] Bamboo Messages are visible in JIRA Activity Stream for all Users

            Michael Steigemann added a comment - - edited

            It would be good if this issue would be fixed somewhen as it is a security issue in my opinion. I have created it more than 5 years ago.

            Michael Steigemann added a comment - - edited It would be good if this issue would be fixed somewhen as it is a security issue in my opinion. I have created it more than 5 years ago.

            Michał Staruch added a comment -

            Due to this problem every JIRA user can see messages from Bamboo, and permissions are ignored. Why this issue is still categorized as minor improvement, not security issue?

            Michał Staruch added a comment - Due to this problem every JIRA user can see messages from Bamboo, and permissions are ignored. Why this issue is still categorized as minor improvement, not security issue?

            Jason Woods added a comment -

            JRA-8689

            Jason Woods added a comment - JRA-8689

            Jason Woods added a comment -

            JIRA-8689 would allow to hide Bamboo from activity stream and disable user dashboard editing. However, it was unwisely rejected it seems. So even modifying activity stream a user can just customise and enable Bamboo messages again.

            Jason Woods added a comment - JIRA-8689 would allow to hide Bamboo from activity stream and disable user dashboard editing. However, it was unwisely rejected it seems. So even modifying activity stream a user can just customise and enable Bamboo messages again.

            Jason Woods added a comment -

            Yes, please fix this. It creates huge head aches if a Bamboo project is under NDA and JIRA is shared.

            Jason Woods added a comment - Yes, please fix this. It creates huge head aches if a Bamboo project is under NDA and JIRA is shared.

            Grigory Usenko added a comment -

            It would be great to have this fixed or, at least, have some workaround.

            Grigory Usenko added a comment - It would be great to have this fixed or, at least, have some workaround.

              Unassigned Unassigned
              26628b90faed Michael Steigemann
              Votes:
              4 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: