Problem:
Since we upgraded from JIRA 5.2 to 6.3.12 on 23.11.2014, we see that the work logged within JIRA (or Tempo in our case) is shown in the History tab of each issue. This was not the case in the older JIRA version.
We updated to JIRA 6.3.13 to get rid of the worklog emails, but 6.3.13 did not change the History tab problem.

Reason:
For us, it is important that Work Log entries are only visible to concerned persons in the company. This typically are project leaders and accounting. All others should not see the worklog of others. It is OK and helpful to see ones own work logs.

Background:
Tempo does a good job in hiding work logs from others. It has permissions for time sheets that fit our needs. But at the JIRA level, this high appreciated level of privacy seems to get lost: Activity Streams show worklog entries, History Tabs show worklog entries. Both shall be hidden to users without permission to do so. We managed to hide Activity Streams (which was a long struggle and not all participants were lucky with the found solution).

This is also a legal issue: In Europe, personal data must be treated in a special way. This is enforced by national and european laws. As I understand it, the current behaviour of JIRA is not conform to European law, because work logs can be seen by people that are not involved with processing this data.

Expected Solution:
The worklog entries should be removed from the history tab for users that do not have the required permission for this. "Issue View" permission is not the right permission to use as well as "Edit All Worklogs". A "View All Worklogs" permission (vs. "View Own Worklogs") would be fine.