Table of Contents |
---|
What's the problem?
Say you run a public Jira instance for interacting with customers. Customer A representatives can view project A, Customer B representatives can view project B, and so on. Your company's employees can see all customer projects.
Jira allows users to share saved searches (filters) and dashboards amongst themselves. We would like to let Customer A representatives create their own filters and dashboards, shared amongst themselves and also with our employees.
Excerpt |
---|
Jira allows sharing out-the-box, but with one flaw: when you're trying to completely partition customers, Jira's sharing tends to leak customer names and filter/dashboard names. |
Customer Customer A can potentially see the names of Customer B's filters and dashboards, and their owners
You can see this on most public Jira instances by going to the 'Find Filters' (server) or 'Issues and filters' (Cloud) page. For example:
...
Background: shared filters and dashboards
Why are these lists of filters visible on public instances anyway?
...
It is possible to allow safe sharing, but requires some Jira tweaking.
Locking down sharing
Down the rabbit - hole we go...
Remove the ability to share with anonymous users
...