Issue Summary

At present there is no way to prevent the accidental tagging of external (Customer/Portal user) accounts as an Agent, when tagged, that user then has access to the comment which can have sensitive information (Internal and Public comments affected).

This is particularly common when a customer display name is very similar to an agent name and autocomplete favours one over the other.

Workaround

Currently there is no known workaround for this behavior. Any attempts to limit the scope of tagging in a project or globally does not specifically exclude customers.