Can issue level security use Group (Anyone on the web)?

[Micko]

I have issue level security configured with two levels.

Public - Group (Anyone on the web) and Any logged in user

Private - Any logged in user

If I select None, anonymous users can see the issue but if I select Public they can't. Is this expected behaviour?

The trouble with selecting None is it hides the security level from the issue and I want that field visible as a reminder for which level is selected.

Everything works as expected if I repeat the experiment with specific users. It only affects the Anyone on the web group.

[Micko · Accepted solution]

I was unable to make this work. Either it's a bug or by design.

The workaround is to simply use 'none' as the issue level security for public or anonymous access. I don't like this as there is no visual indicator for public issues. There is a visual indicator for private but I'd prefer it the other way around.

Note: I'd prefer all issues hidden behind a customer login and then by issue level security but Atlassian don't allow this with our license.