• 1
    • 15
    • We collect Jira Service Desk feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Service Desk Server. Using JIRA Service Desk Cloud? See the corresponding suggestion.

      Problem Definition

      In certain environments, agents have access to the inbox of the mail account that Service Desk uses for the mail channel. In this scenario, it is possible for the agent to manipulate customer satisfaction feedback ratings in the event that the customer replies to Closed\Resolved notification containing the satisfaction survey. If the reply includes the quoted body of the survey, the agent can follow the link and change the star rating.

      Suggested Solution

      Expire the feedback token after initial customer survey completion. Alternatively, disallow agent access to satisfaction feedback survey pages.

          Form Name

            [JSDSERVER-4056] Expire Satisfaction Feedback Token

            SET Analytics Bot made changes -
            UIS Original: 2 New: 1
            SET Analytics Bot made changes -
            Support reference count Original: 1 New: 15
            SET Analytics Bot made changes -
            UIS Original: 1 New: 2
            Marc Dacanay made changes -
            Labels New: ril
            Marc Dacanay made changes -
            Remote Link New: This issue links to "Internal ticket (Web Link)" [ 976695 ]
            SET Analytics Bot made changes -
            UIS Original: 2 New: 1
            SET Analytics Bot made changes -
            UIS Original: 3 New: 2
            SET Analytics Bot made changes -
            UIS Original: 2 New: 3
            Mehboob Salim Shaikh made changes -
            Link New: This issue is blocked by JSDSERVER-15583 [ JSDSERVER-15583 ]
            SET Analytics Bot made changes -
            UIS Original: 1 New: 2

              Unassigned Unassigned
              rgould@atlassian.com Russ Gould [Atlassian] (Inactive)
              Votes:
              20 Vote for this issue
              Watchers:
              17 Start watching this issue

                Created:
                Updated: