Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-63855

Remove content from activity stream

    XMLWordPrintable

Details

    • 1
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

    Description

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      We have a large environment with > 80 of our sister/subsidiary companies in it, and each of those have client/supplier accounts in the platform.

      While the activity feed that shows on JIRA shows issues related to just their project access, it's showing profile image updates for all users, which allows data mining to happen to get names/emails of other companies/clients. Our security team has highlighted this as a high level information leakage issue in our latest SoX review and must be addressed.

       

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              557164426d77 Uhub Admin
              Votes:
              5 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated: