-
Suggestion
-
Resolution: Obsolete
-
6
-
NOTE: This suggestion is for JIRA Service Desk Cloud. Using JIRA Service Desk Server? See the corresponding suggestion.
The customer portal is designed to ensure that only the reporter and participants of an issue can see it, as well as agents.
But if anonymous access is enabled, currently everyone becomes able to see every issue, including internal and external comments.
Therefore, the solution seems to be that it should not be possible for an anonymous user to have access to a Service Desk project.
- is related to
-
JSDSERVER-2171 Anonymous user should not have access to view Service Desk issues
- Gathering Interest
[JSDCLOUD-2171] Anonymous user should not have access to view Service Desk issues
Workflow | Original: JAC Suggestion Workflow [ 3443258 ] | New: JAC Suggestion Workflow 3 [ 3696774 ] |
Status | Original: RESOLVED [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JSD Suggestion Workflow - TEMP [ 2320372 ] | New: JAC Suggestion Workflow [ 3443258 ] |
Status | Original: Closed [ 6 ] | New: Resolved [ 5 ] |
Resolution | New: Obsolete [ 11 ] | |
Status | Original: Open [ 1 ] | New: Closed [ 6 ] |
Support reference count | New: 6 |
Workflow | Original: JSD Suggestion Workflow [ 2051377 ] | New: JSD Suggestion Workflow - TEMP [ 2320372 ] |
Workflow | Original: JSD Suggestion Workflow - TEMP [ 2046456 ] | New: JSD Suggestion Workflow [ 2051377 ] |
Workflow | Original: JSD Suggestion Workflow [ 1873732 ] | New: JSD Suggestion Workflow - TEMP [ 2046456 ] |
Description |
Original:
The customer portal is designed to ensure that only the reporter and participants of an issue can see it, as well as agents. But if anonymous access is enabled, currently everyone becomes able to see every issue, including internal and external comments. Therefore, the solution seems to be that it should not be possible for an anonymous user to have access to a Service Desk project. |
New:
{panel:bgColor=#e7f4fa} *NOTE:* This suggestion is for *JIRA Service Desk Cloud*. Using *JIRA Service Desk Server*? [See the corresponding suggestion|http://jira.atlassian.com/browse/JSDSERVER-2171]. {panel} The customer portal is designed to ensure that only the reporter and participants of an issue can see it, as well as agents. But if anonymous access is enabled, currently everyone becomes able to see every issue, including internal and external comments. Therefore, the solution seems to be that it should not be possible for an anonymous user to have access to a Service Desk project. |
Link | New: This issue is related to JSDSERVER-2171 [ JSDSERVER-2171 ] |
Project Import | New: Sun Apr 02 00:24:18 UTC 2017 [ 1491092658763 ] |