-
Suggestion
-
Resolution: Unresolved
-
None
-
None
-
1
-
Currently, if someone sets up a filter subscription for users who do not have access to view the saved filter they are still able to receive notifications for the filter through the filter subscription. In instances where the data contained in the filter results is sensitive it would be best practice to have such an option in order to ensure that sensitive data is not leaked.
Test case:
- Create a filter
- Grant view access to the "Administrator" role of the project used by the filter.
- Create a filter subscription where users in the "jira-software-users" group are subscribed to receive notifications for the saved filter.
The result is that anyone in the jira-software-users group receives the notification. The ask is to make it so that only users that are granted view access to the filter AND are in the jira-software-users group would receive the notification.
- relates to
-
JRASERVER-34166 Filter Subscription to external users
- Gathering Interest