Implement restriction on attachment

[chakib soudani]

Hello,

We are currently running JAVA version 6.3.15 and we would like to implement restrictions on attached documents relatd to issues. The objective is that a specific group of users will not be able to read / update / delete attached documents and others will be authorized.

We are running time and we can't upgrade the existing version to the last updated one. We would like to identify a way to implement such restriction with the current version (as it's currently managed with comments).

Thank you

Best

Chakib

[Eric Lemay]

Hello, 

You can find documentation here on the topic,

https://confluence.atlassian.com/jira063/managing-project-permissions-683542720.html

but you should be able to manipulate the permissions for attachments by adding specific groups and leaving the users you need out of it, so that only specific users can manipulate attachments.

Eric

[chakib soudani]

Hello,

Thank you Eric. However, as far as I understand, the permission will manage the ability to create attachement or delete them. Our objective is to restrict visibility to these attachments.

For example, we have 2 users A and B

A will create attachment for issue#1

B will not be able to see the attachement created by A for issue #1

I do not think that the existing permission scheme allows such restriction..

Best

Chakib

[Eric Lemay]

Hi Chakib, unfortunately you are correct, it won't control visibility.   I don't see a way that this could be hidden entirely.