Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-3392

Restrict internal comments to only users listed in project roles


    • 18
    • 8
    • We collect Jira Service Desk feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Service Desk Server. Using JIRA Service Desk Cloud? See the corresponding suggestion.

      Experienced Behavior

      JIRA users are able to view Service Desk requests when granted "Browse Project" permission. These users are automatically able to view internal comments.

      Expected Behavior:

      JIRA users are able to view Service Desk request when granted "Browse Project" permission but are not able to view internal comments unless they are a part of the Service Desk Team.

      Suggested Resolution:

      Use project roles to determine if internal comments should be shown to users. A user who has "Browse Project" permission but no project roles should be able to view the request but not any internal comments. Users with "Browse Project" permission should be able to view internal comments when added to a project role such as "Service Desk Team" "Administrators" or "Developers"

            Unassigned Unassigned
            tevans Tim Evans (Inactive)
            136 Vote for this issue
            66 Start watching this issue