Uploaded image for project: 'Jira Server and Data Center'
  1. Jira Server and Data Center
  2. JRASERVER-10689

Add "reporter domain" permission

    XMLWordPrintable

    Details

    • Feedback Policy:
      We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      Description

      Currently, we have an issue security scheme that specifies a security level of "Reporter plus support." Of course, the "Users/Groups" for this level is "Reporter" plus the group of users that comprise the support folks. This has worked really well for us.

      Some of our "customers" have more than one user that submits issues, and they would like to see all the issues reported by their "company."

      Rather than try to manage this with separate groups (one for each customer, I would like to try this:

      We need something like a "Reporter Domain" user/group and when this is specified, security checks would work similar to the "Reporter" user. But instead of comparing the id of the current signed-on user with the id of the reporter of the issue, compare the e-mail domain of the signed-on user with the "reporterdomain" custom field (that is implemented by one of the Atlassian supplied plug-ins) in the issue.

      We would like to see this as both an issue security level and as a transition condition.

      Clearly the execution code change is very small. The trick is going to be getting this configurable, translated, documented, etc.

      A portion of this is already implemented in that we already have the "reporterdomain" field configured.

      Of course, using e-mail for this introduces it's own set of requirements on registration. For example, there needs to be a flag in configuration to require e-mail verification. That is, it should not be possible for someone to register with an e-mail address of tom@mycompany.com and then be able to look at all issues reported by anyone at mycompany.com without at least going through mycompany's e-mail system first.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              rlsayre Reid Sayre
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: