Problem Definition

The Configuring issue-level security document has the following statement:

You now have the power to select the default security level that will be applied to issues assigned to each security scheme. Some things to keep in mind when setting a default security level:

• If the reporter of an issue does not have the 'Set Issue Security' permission, the issue will be set to the default security level.
• If an issue security scheme doesn't have a default security level, issue security levels will be set to 'None' (anyone can see the issues).

There's a additional scenario when:

• The user has the Set Issue Security permission
• The user isn't assigned to the default issue security level.

In this scenario if the user doesn't change anything on the security level attribute when opening a ticket, then it won't use the default security level, but some other the user is assigned to.

Suggested Solution

We need to add the above information to make it clear to users on the expected behavior.
In addition to this, it could be helpful to inform users can only choose security levels to which they are assigned to.