Purpose

This KB article is designed to address the use case where users are able to browse all issues in the project, not only the ones they are assigned to or reported by. This is fixed by Configuring issue-level security, which is described in further detail in that link.

By following the proposed solution, the below will be implemented:

• If user Mary is assigned to an Issue, she'll be able to see it because she'll be the 'Current Assignee'.
• If user Mary belongs to a group inside the 'Project Roles (Developers)' then she will also be able to see it.
• If she is not in either of them, she will not see the issue.

Solution

The following example restricts the issue view to the Assignee, but it can also be used for the Reporter. Additionally, it details how to create a generic scheme with that restriction that may be applied to several projects.

1. As per Configuring issue-level security, follow "Creating an issue security scheme"  and name it "Assignee and Developers Security Scheme".
2. As per "Adding a security level to an issue security scheme":
3. Create a Security level named: 'Assignee and Developers'.
4. Add 'Current Assignee' to that Security Level (you may add Reporter as well).
5. Add 'Project Role (Developers)'.
6. Set it to 'Default'.

7. Continue by "Assigning an issue security scheme to a project" (your projects).

    The 'Project Role (Developers)' was used to make it generic. The 'Roles' will help you use the same Generic Security and Permissions schemes on multiple projects. You can define different groups into Roles for different projects and still use the same Scheme we just created. (see Managing project roles for more information).

A Security Level was assigned to the project to restrict access only to Assignees and Developers to the issues on that project. Watchers must be in the Developers' group to have access. If you have a Watchers Group or Role, also add it to the Security Level. Remember that by using Roles you can use the same Security Scheme for other projects too.

Alternative Solution

It is possible to set the Browse Project permission to Assignee or Reporter; however, due to the bugs below, this will make the project visible to all users.

• JRACLOUD-34389 - Getting issue details... STATUS