Experienced Behavior

JIRA users are able to view Service Desk requests when granted "Browse Project" permission. These users are automatically able to view internal comments.

Expected Behavior:

JIRA users are able to view Service Desk request when granted "Browse Project" permission but are not able to view internal comments unless they are a part of the Service Desk Team.

Suggested Resolution:

Use project roles to determine if internal comments should be shown to users. A user who has "Browse Project" permission but no project roles should be able to view the request but not any internal comments. Users with "Browse Project" permission should be able to view internal comments when added to a project role such as "Service Desk Team" "Administrators" or "Developers"