Issue Summary

When the "Allow all emails that contain a valid work item key to be added as a comment to the work item?" setting is enabled, any incoming email with a valid work item key automatically adds a public comment to the corresponding work item. 

While this functionality is helpful, it can also result in spam or unintended emails being publicly visible in the customer portal. This creates a risk of misuse and unwanted content being exposed to users.

Suggested Solution

Introduce a setting that allows administrators to control the visibility of comments added from external emails. Specifically:

• Provide an option to set such comments as internal by default, or
• Allow configuration to determine whether comments from external emails should be added as public or internal.

Workaround

As mentioned in Allow external emails to be added as comments on work items, administrators can use the blocklist to prevent specific email addresses or domains from sending in incoming email.