• 4
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.

      We just purchased JIRA to handle our support issues, and were surprised there's no separate permissions for attachments. Our support issues always involve binary files containing usernames and passwords. Our customers need to be able to attach these files in order for us to solve their support problem, but, since those files contain usernames and passwords, they must not be viewable by other users.

      Ideally we'd be able to configure it so that users could upload and view their own attachments, but not attachments for support issues created by others.

            [JRACLOUD-6185] Separate View & Create Permissions For Attachments

            Hi Artyom

            If I understand you correctly you are wanting to hide any attachments (from the customer) on a Ticket where the security level is "Development". In that case the answer is no. Currently you can limit access to users to one or more user groups and/or the reporter/creator/assignee. I'll take note of it and have a look at it when my current workload is cleared. I can't guarantee anything but will have a look at it.

            Thanks
            Paul

            Paul Clark [Redmoon Software] added a comment - Hi Artyom If I understand you correctly you are wanting to hide any attachments (from the customer) on a Ticket where the security level is "Development". In that case the answer is no. Currently you can limit access to users to one or more user groups and/or the reporter/creator/assignee. I'll take note of it and have a look at it when my current workload is cleared. I can't guarantee anything but will have a look at it. Thanks Paul

            Hey Paul,

            Have looked through your solutions:

            But as I summed up, they do not allow to select Security Level right while uploading attachment (separate attachments on user groups/security permissions).

            We need a way to separate attachments in JIRA tickets by Security Level (like it's implemented for comments).

            Example - I have Security Level called "Development". Comments/Tickets with this Security Level can only be viewable by QA/Development teams, but not by the Customer.
            We have ticket submitted by our customer and have a discussion in it between QA-Development, but don't want to show it to the customer who is also in this ticket, so we choose Security Level = "Development" while posting comments (here is the screenshot about Security Level I refer to http://take.ms/tEA8M).

            So, I want to add attachment that also can be viewed only by QA/Development teams, but not by the customer.

            Is that functionality implemented in any of your solutions?

            Thanks in advance,
            Artyom.

            Artyom Veselov added a comment - Hey Paul, Have looked through your solutions: https://marketplace.atlassian.com/plugins/com.redmoon.jira.attachment-permissions https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault But as I summed up, they do not allow to select Security Level right while uploading attachment (separate attachments on user groups/security permissions). We need a way to separate attachments in JIRA tickets by Security Level (like it's implemented for comments). Example - I have Security Level called "Development". Comments/Tickets with this Security Level can only be viewable by QA/Development teams, but not by the Customer. We have ticket submitted by our customer and have a discussion in it between QA-Development, but don't want to show it to the customer who is also in this ticket, so we choose Security Level = "Development" while posting comments (here is the screenshot about Security Level I refer to http://take.ms/tEA8M ). So, I want to add attachment that also can be viewed only by QA/Development teams, but not by the customer. Is that functionality implemented in any of your solutions? Thanks in advance, Artyom.

            anu added a comment -

            Thanks so much for your votes and comments on this feature request.
            We've taken a good look at this feature along side the other top JIRA features and unfortunately we won't be able to fit this into the JIRA roadmap for the next 12 months. As an alternative, document Vault, as mentioned by Paul above is a way to restrict attachments (https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault)

            Here is how the JIRA team uses JAC feedback:
            https://answers.atlassian.com/questions/110373/how-does-the-jira-team-use-jira-atlassian-com
            We hope you understand and appreciate our honesty on these requests.

            Cheers,
            Anu
            abharadwaj at atlassian dot com

            anu added a comment - Thanks so much for your votes and comments on this feature request. We've taken a good look at this feature along side the other top JIRA features and unfortunately we won't be able to fit this into the JIRA roadmap for the next 12 months. As an alternative, document Vault, as mentioned by Paul above is a way to restrict attachments ( https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault ) Here is how the JIRA team uses JAC feedback: https://answers.atlassian.com/questions/110373/how-does-the-jira-team-use-jira-atlassian-com We hope you understand and appreciate our honesty on these requests. Cheers, Anu abharadwaj at atlassian dot com

            Hi cgi

            Thanks for the response

            The new Market Place pages aren't particular good for display prices. If you click the "Or buy it now" link on the top right it will take you to the https://www.atlassian.com/purchase/addon/com.redmoon.jira.documentvault page. This should show you the purchase price relevant to you current license. If it doesn't (or you are not logged in) click on the "Manual" heading and that will allow you to see the licenses and prices.

            Thanks
            Paul

            Paul Clark [Redmoon Software] added a comment - Hi cgi Thanks for the response The new Market Place pages aren't particular good for display prices. If you click the "Or buy it now" link on the top right it will take you to the https://www.atlassian.com/purchase/addon/com.redmoon.jira.documentvault page. This should show you the purchase price relevant to you current license. If it doesn't (or you are not logged in) click on the "Manual" heading and that will allow you to see the licenses and prices. Thanks Paul

            Hi Coskun

            thanks for the response

            I will have a look at trying to hide/remove the attachment details. Is this only for when a JIRA Issue is closed? I don't have a migration facility at the moment but I could look at writing one.

            Attachments can be turned off by a JIRA System Admistrator or JIRA Administrator with Global Permissions. Navigation to Admin System page, click on Attachments under the Advanced heading. This will open the attachments page. Click edit settings and disable Attachments and turn off thumbnails and zip support. Attachments can still be seen but not added.

            For future responses can you please send an email to paul.k.clark@gmail.com.

            Thanks
            Paul

            Paul Clark [Redmoon Software] added a comment - Hi Coskun thanks for the response I will have a look at trying to hide/remove the attachment details. Is this only for when a JIRA Issue is closed? I don't have a migration facility at the moment but I could look at writing one. Attachments can be turned off by a JIRA System Admistrator or JIRA Administrator with Global Permissions. Navigation to Admin System page, click on Attachments under the Advanced heading. This will open the attachments page. Click edit settings and disable Attachments and turn off thumbnails and zip support. Attachments can still be seen but not added. For future responses can you please send an email to paul.k.clark@gmail.com. Thanks Paul

            cgi added a comment -

            Paul, this plugin is of interest to us. However, on the pricing page, there is no price for Enterprise/unlimited users. Can you please send me some pricing information for unlimited Jira users? Or can we just select users within our company (no client users) that could use this plugin, and thereby fall into one of the other pricing categories? Thanks.

            cgi added a comment - Paul, this plugin is of interest to us. However, on the pricing page, there is no price for Enterprise/unlimited users. Can you please send me some pricing information for unlimited Jira users? Or can we just select users within our company (no client users) that could use this plugin, and thereby fall into one of the other pricing categories? Thanks.

            Coskun added a comment -

            Hi Paul, firstly thank you for your interest.

            I installed and configured the "Document Vault for Jira" with eval. license in myjira.I configured to Doc.Vault Section according to group visibility.It is OK.In addition,I have a critical question.I understand that, there will be two sections (Attachments(Jira) & Document Vault ) in a issue page .Well, After I start using the add-on, how can I hide the old attachments according to group users. Namely,is migration processing possible from jira attachment to Doc Vault ?

            Thanks in advance.

            Coskun added a comment - Hi Paul, firstly thank you for your interest. I installed and configured the "Document Vault for Jira" with eval. license in myjira.I configured to Doc.Vault Section according to group visibility.It is OK.In addition,I have a critical question.I understand that, there will be two sections (Attachments(Jira) & Document Vault ) in a issue page .Well, After I start using the add-on, how can I hide the old attachments according to group users. Namely,is migration processing possible from jira attachment to Doc Vault ? Thanks in advance.

            Hi, I have a plugin that I think should be able to do this. It's called Document Vault (https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault) and is an independent attachments system within JIRA. Access can be confined to a group of users and/or Issue reporter and/or assignee. Unauthorised users are not able to view the attachments and the attachments related comment. There is also a project level search page to view attachments (that you are authorised to see) within the project. I am also open to suggestions if there is particular functionality you want added.

            Paul Clark [Redmoon Software] added a comment - Hi, I have a plugin that I think should be able to do this. It's called Document Vault ( https://marketplace.atlassian.com/plugins/com.redmoon.jira.documentvault ) and is an independent attachments system within JIRA. Access can be confined to a group of users and/or Issue reporter and/or assignee. Unauthorised users are not able to view the attachments and the attachments related comment. There is also a project level search page to view attachments (that you are authorised to see) within the project. I am also open to suggestions if there is particular functionality you want added.

            Piet Piet added a comment -

            To solve this issue you can link the issue to Confluence, which has a more advanced level of managing restricitions concerning content (attachments)

            Piet Piet added a comment - To solve this issue you can link the issue to Confluence, which has a more advanced level of managing restricitions concerning content (attachments)

            We have a similar use-case, where we need to attach confidential information to a ticket for support, but are bound by policy and/or confidentiality agreements to restrict access to such data after the ticket is closed. Deleting an attachment is an option, although not ideal as we may need to reference back to the data at a later time. It would be beneficial if we could block access to specific attachments once a ticket is closed.

            Ken Tannenbaum added a comment - We have a similar use-case, where we need to attach confidential information to a ticket for support, but are bound by policy and/or confidentiality agreements to restrict access to such data after the ticket is closed. Deleting an attachment is an option, although not ideal as we may need to reference back to the data at a later time. It would be beneficial if we could block access to specific attachments once a ticket is closed.

              Unassigned Unassigned
              07cd60c58fa1 Michael Czeiszperger
              Votes:
              63 Vote for this issue
              Watchers:
              44 Start watching this issue

                Created:
                Updated:
                Resolved: