• 15
    • 4
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      We would like to be able to mark an issue open to certain people who would otherwise not have access to it, either through project or issue priority schemes.

      What we initially thought we could do was to mark the users as watchers of a particular issue, which would then allow the user to get emails when the issue changes. While this works (apparently due to bug JRA-5743), it doesn't allow the user additional access to the issue over time through the web interface. What we would like is an additional option on the Issue Security Scheme to support allowing anyone marked as a watcher of an issue to be able to be in a security level.

      The particular use case is:

      • User submits a "help desk" request. This goes to the "Help Desk" project
      • The Help Desk project has a "Reporters and Developers" issue security system
      • Developer realizes that this requires development (rather than just a quick fix) and is already being tracked by an issue in the "Core" project
      • Developer marks the "Help Desk" issue as a duplicate of the "Core" issue and makes the original reporter of the "Help Desk" issue a watcher on the "Core" issue
      • From here, while the reporter would otherwise not be able to see anything in the "Core" project, because a developer has made him watch that issue, he should be able to see it.

      This was originally tracked in the Atlassian support system as JSP-864.

            [JRASERVER-5982] Watcher Issue Security Field

            This issue is 17 years olad and many of us would still find it useful. It' seems like a really basic use case to me. Our security level allows administrators, developers, reporter and assigneee access. Often the reporter has viewer only role which means they can't see other secured tickets. However sometimes we would want their boss, or someone else within their department to be abvle to follow the ticket as well. Currently we are unable to do that without adding yet another custom (,multi user selection) withint the project and adding the various people to that. That is ridicuously complex when the entire point of having the existing watchers field is to allow all watchers of that ticket to see and follow it!

            paulacruickshank added a comment - This issue is 17 years olad and many of us would still find it useful. It' seems like a really basic use case to me. Our security level allows administrators, developers, reporter and assigneee access. Often the reporter has viewer only role which means they can't see other secured tickets. However sometimes we would want their boss, or someone else within their department to be abvle to follow the ticket as well. Currently we are unable to do that without adding yet another custom (,multi user selection) withint the project and adding the various people to that. That is ridicuously complex when the entire point of having the existing watchers field is to allow all watchers of that ticket to see and follow it!

            This ticket has been around since before 2005, it still seems a crucial bit of functionality to anyone using Issue Security. Are there any plans to give us an option to include watchers in the issue security?

            Emma Baxter added a comment - This ticket has been around since before 2005, it still seems a crucial bit of functionality to anyone using Issue Security. Are there any plans to give us an option to include watchers in the issue security?

            David Yu added a comment -

            That's troubling since the Watcher plugin have become pretty critical to many businesses. It's also been the recommended method for adding watchers on Issue Creation by Atlassian. I have an old fork of the code here...perhaps someone has a more recent copy to continue on the work.

            David Yu added a comment - That's troubling since the Watcher plugin have become pretty critical to many businesses. It's also been the recommended method for adding watchers on Issue Creation by Atlassian. I have an old fork of the code here ...perhaps someone has a more recent copy to continue on the work.

            Piotr Janik added a comment - - edited

            7bc97e81aad0 They haven't discontinued Data Centers, only Servers. For now at least...

            Now that Jira Watcher Field by Ray Barham has evaporated from both Atlassian Marketplace and Bitbucket, this ticket becomes even more noteworthy.

            Piotr Janik added a comment - - edited 7bc97e81aad0 They haven't discontinued Data Centers, only Servers. For now at least... Now that Jira Watcher Field by Ray Barham has evaporated from both Atlassian Marketplace and Bitbucket, this ticket becomes even more noteworthy.

            Atlassian has officially abandoned their on prem product so you can forget about any updates.

            Thanks to Atlassian's poor management we've given up on their products entirely and have moved to Gitlab + other tools.

            Ilsa Loving added a comment - Atlassian has officially abandoned their on prem product so you can forget about any updates. Thanks to Atlassian's poor management we've given up on their products entirely and have moved to Gitlab + other tools.

            I can't believe that this ticket is 16 years old!

            This is incredibly frustrating to not be able to do that. This causes a huge problem where we basically cannot use security properly.

            Unfortunately, with an issue this old, I have no hope that this will ever be fixed...

            Jérémie Grauer added a comment - I can't believe that this ticket is 16 years old! This is incredibly frustrating to not be able to do that. This causes a huge problem where we basically cannot use security properly. Unfortunately, with an issue this old, I have no hope that this will ever be fixed...

            TothJ added a comment -

            I just implemented this in our Jira 4.3.4. There was an interesting aspect of this tho: if you want to add someone to an issue as watcher, he/she needs to able to see the issue (browse permission and issue security). But you cant add him/her, since he/she cant see the issue. So I modified the watcher manager class, when you try to add someone as watcher to an issue which has issue security and this security has this rule (watchers can see the issue) then I dont check if the user can see the issue.

            TothJ added a comment - I just implemented this in our Jira 4.3.4. There was an interesting aspect of this tho: if you want to add someone to an issue as watcher, he/she needs to able to see the issue (browse permission and issue security). But you cant add him/her, since he/she cant see the issue. So I modified the watcher manager class, when you try to add someone as watcher to an issue which has issue security and this security has this rule (watchers can see the issue) then I dont check if the user can see the issue.

            I have the same request, also in a help desk environment. We have also set the security level on "reporter" so users can only see their own issues. However, we would also like other users from the same company for instance, to be able to view and edit the issue. Setting security level on watchers would probably solve this issue for us, since we could add the group which represents all users from that company to the watch list.

            Christiaan des Bouvrie added a comment - I have the same request, also in a help desk environment. We have also set the security level on "reporter" so users can only see their own issues. However, we would also like other users from the same company for instance, to be able to view and edit the issue. Setting security level on watchers would probably solve this issue for us, since we could add the group which represents all users from that company to the watch list.

            Technically this should be possible - as we would just need a different permission type (much like reporter & assignee). However, we would need to throw new events when a watcher is added or removed, as we would need to reindex the issue.

            There are probably two things that we should do before we attach this bug:

            • Throw more events throughout JIRA, and use a pluggable event architecture system
            • Allow different parts of the system to automatically listen for events. This could be through Pico.

            Scott Farquhar added a comment - Technically this should be possible - as we would just need a different permission type (much like reporter & assignee). However, we would need to throw new events when a watcher is added or removed, as we would need to reindex the issue. There are probably two things that we should do before we attach this bug: Throw more events throughout JIRA, and use a pluggable event architecture system Allow different parts of the system to automatically listen for events. This could be through Pico.

              Unassigned Unassigned
              29c2044e2321 Kirk Wylie
              Votes:
              166 Vote for this issue
              Watchers:
              75 Start watching this issue

                Created:
                Updated: