How do I allow permission of a group to view issues only if a custom field value is xyz

[Brian Cohen]

We want to allow Customer support to have read-only (view only) access to bugs in a project, but only bugs of which a Jira custom field is set to "Customer".

It seems the Security and permission schemes allow only project level decalarations, without allowing any conditions. And the workflow schemes are meant for actual status change/transition permissions, right?

[Nic Brough -Adaptavist-]

Not quite. You're right about permissions - they handle "who can see project". But you do need to use security schemes for this, because that allows you to hide issues inside projects. The reason it looks like a project thing at first is that you say "use this security scheme for this project"

The way it works (over simplified): When a user looks at a project, Jira checks if they have "browse" /permission/. If there's no security scheme, it lets them see everything. If there is a security scheme, then it looks at each individual issue and checks the security level before allowing them to see it.

You sound like you need a permission scheme that lets everyone in, but then says "if security level = not-customer (replacing your custom field), then restrict viewing to group/role X"

[Brian Cohen]

Nic,

Correct, that's EXACTLY what I need! Now how do I do it? ;-)