Issue Security Level in Dashboard

[Jeran Fisher]

My problem is all my users can see all tickets in the dashboard. Even though I have security levels in place. But once a user clicks on a ticket that isn't their security level a message appears saying they can't access the ticket (which is what I want). My problem is they are able to SEE the tickets from the dashboard.

Is there a way to completely block tickets that aren't in their security level?

Example:

User A is in Security Level 1.

User A can see every ticket in Security Level 1-5 from the Dashboard.

User A can't open up tickets in Security Level 2-5, error message appears like normal.

User A is able to see information on Security Level 2-5 from what items I have on the Dashboard (like Key, Issue Type, Summary, Risks, Costs, etc)

I don't want users seeing other tickets that aren't in their Security Level. I want to keep risks and costs data private to only that Security Level.

Example, I don't want Security 1 seeing Security 3 tickets.

Is this possible?

[Elizabeth Jones]

It sounds like you would like a single dashboard that dynamically filters the issues by security level of the user. I do not know how to do that. 

However, you could change the fields that are visible on the dashboard to ensure that no sensitive information is visible to users. 

[Jeran Fisher]

I need the same fields for all security levels. Each security as their own data and it needs to be hidden from each security level. I hope that clears it up better.

[Trudy Claspill]

Hello @Jeran Fisher 

Welcome to the community.

Your post is tagged that you are using a Free plan for Jira. Are you really using a Free plan, or are you using a paid subscription?

[Jeran Fisher]

I have a paid subscription

[Trudy Claspill]

Based on the Atlassian University training on Issue Security, users should not see the issues anywhere in Jira; in any reports or filter results or dashboards.

I checked with other community leaders on this topic. @Nic Brough -Adaptavist-  pointed out that there is a new permission concerning Viewing Aggregated Data (refer to this), but the way I read the information it doesn't seem like it should be showing non-Epic issue information.

I think you should raise this issue to Atlassian Support directly for clarification. And please report back here what you learn.

https://support.atlassian.com/contact/#/