-
Suggestion
-
Resolution: Unresolved
-
3
-
37
-
Problem Definition
Currently there's no built-in feature to disable @mention notifications for a specific project.
Suggested Solution
As an admin, I should be able to disable/enable the @mention email notifications for any project.
Why this is important
This functionality could help to prevent sensitive information to be exposed when the @mention feature is being used.
Workaround
There are two things that allow @mention to work.
- The @mention uses the Browse Users global permission to determine whether they will be able to see the user list or not. So to prevent this you can remove all groups in the Browse Users global permission so your user would not be able to search for the user at all. The downside of doing this is you would not be able to search for the user even in any other field such as Assignee or Reporter. For more details please see Managing global permissions.
- The comment field needs to be of Wiki Style Renderer. By default; fields like Description or Comment is set to Wiki Style Renderer. If you change it to Default Text Renderer in your Field Configuration; you will no longer be able to use @mention. However, you'd also not be able to styling your text in the Comment any more and you can't no longer use tags such as the code tag. For instructions please refer to Specifying field behavior.
- was cloned as
-
JRASERVER-71381 Ability to disable the @mention notifications for a specific project
- Gathering Interest
- mentioned in
-
Page Failed to load
Form Name |
---|
It is not unreasonable to assume that the global settings should be possible to be overridden by specific project-related settings. By failing to do so, this opens up the potential for some fairly significant security issues. When will Atlassian be looking in to this? As it's been open since 2018, there really ought to be some kind of update by now.