Configuring issue-level security

Before you begin

• Log in as a user with the Jira Adminis global permissions to configure issue-level security.
• Make sure all users who want to use issue-level security have the project-specific "Set issue security" permission.

Creating an issue security scheme

1. In the upper-right corner of the screen, select Administration  > Issues.
   
   
2. In the sidebar, select Issue security schemes.
3. Select Add issue security scheme.

4. Fill in the requested details and click Add.

Adding a security level to an issue security scheme

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Select the scheme name, or the Security levels link in the Actions column, to open the Edit issue security levels page.

4. Fill in the requested details and then click Add security level.

Setting the default security level for an issue security scheme

You now have the power to select the default security level that will be applied to issues assigned to each security scheme.

Some things to keep in mind when setting a default security level: 

• If the reporter of an issue does not have the 'Set Issue Security' permission, the issue will be set to the default security level. 
• If an issue security scheme doesn't have a default security level, issue security levels will be set to 'None' (anyone can see the issues).

• If the user has the Set Issue Security' permission but they aren't assigned to the default issue security level and don't update the security level when opening a ticket, the issue won't be set to the default security level. Instead, it'll be set to the security level that this user is assigned to.

To set up the default security level:

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Select the scheme name, or the Security levels link in the Actions column, to open the Edit issue security levels page.
   1. To set the default security level, locate the appropriate Security level and click Default in the Actions column.
   2. To remove the default security level, click Change default security level to "None" link (near the top of the page).

Adding members to a security level

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Select the scheme name, or the Security levels link in the Actions column, to open the Edit issue security levels page.
4. Locate the appropriate security level and click its Add link (in the Actions column), which opens the Add user/Group/Project role to issue security level page.

5. Select the appropriate user, group or project role, then click the Add button.

   A security level's members may consist of:

   • Individual users
   • Groups
   • Project roles
   • Issue roles such as 'Reporter', 'Project Lead', and 'Current Assignee'
   • 'Anyone' (eg. to allow anonymous access)
   • A (multi-)user or (multi-)group picker custom field.
6. Repeat steps 4 and 5 until all appropriate users, groups, or project roles have been added to the security level.
   

Assigning an issue security scheme to a project

1. In the upper-right corner of the screen, select Administration  > Projects.
2. Select the name of the project of interest. The Project summary page is displayed.
3. In the Permissions section of the Project summary page, click the link corresponding to the Issues label to open the Associate issue security scheme to project page. This will either be the name of the project's current issue security scheme, or the word None.
4. Select the issue security scheme that you want to associate with this project.
5. If there are no previously secured issues (or if the project did not previously have an issue security scheme), skip the next step.
6. If there are any previously secured issues, select a new security level to replace each old level. All issues with the security level from the old scheme will now have the security level from the new scheme. You can choose 'None' if you want the security to be removed from all previously secured issues.

7. Click the Associate button to associate the project with the issue security scheme.

   If the Security Level field is not displayed on the issue's screen after configuring the Issue-Level Security, use the Where is My Field? tool to see why it is not being displayed.

   If the Security Level field has been hidden on purpose, please see the limitations of doing so in Hiding or showing a field.

Deleting an issue security scheme

It's important to understand that you can't delete a issue security scheme if it is associated with a project. You must first remove any associations between the issue security scheme and projects in your Jira installation — please refer to Assigning an Issue Security Scheme.

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Click the Delete link (in the Actions column) for the scheme that you want to delete.
4. On the confirmation page, click Delete to confirm the deletion. Otherwise, click Cancel.

Editing an issue security scheme

You can edit the name and description of an issue security scheme. You can also edit the Default Security Level when editing an issue, and the security level will be applied in the same manner as described in Setting the default security level for an issue security scheme.

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Click the Edit link (in the Actions column) for the scheme that you want to edit.
4. Make your edits, and then click Update to confirm the edits. Otherwise, click Cancel.

Copying an issue security scheme

1. In the upper-right corner of the screen, select Administration  > Issues.
2. In the sidebar, select Issue security schemes to open the Issue security schemes page, which lists all the issue security schemes currently available in your Jira installation.
3. Click the Copy link (in the Actions column) for the scheme that you want to copy. A new scheme will be created with the same security levels and the same users/groups/project roles assigned to them. Your new scheme will be called 'Copy of ...'. You can edit your new scheme to give it a different name if you wish.