Jira - Permissions to allow and deny visibility + grant access per user

[Gavin]

Hi All,

I have an issue. That I would like to do the following:

Issues

- item 1 - Group A - Can view the issue

- item 2 - Group B - Can not view the issue

- item 3 - Group A - can add a member of Group B to the watcher field allow them to view the issue.

current scheme: Level 1 Security Level 

• Current assignee
• Group (Group A)
• Project Role (Administrators)
• Project lead
• Reporter

Issue:

- when group A member adds a Group B member into the watchers field.

Error:

here was an error adding watcher

• The user "groupUserBmember" does not have permission to view this issue. This user will not be added to the watch list.

Observations

• if we remove the security level (clearly it'll work)
  • add GroupB Member to watchers
  • then apply the level 1 scheme
  • it works

How can I add Group B member into the watchers list so that they can view the issue without removing the level 1 security level?

thanks

[Josh Costella]

Hi @Gavin 

In this scenario, I would use a multi-user picker custom field. That can be added to the security level. You can then update the Notification scheme to notify people in that user picker field with any notification triggers you'd want. Watchers still has to abide by the Security Level. Since the Watchers field is not able to be added to a Security Level, a custom multi-user picker field is the next best thing, IMHO.

[Gavin]

Thanks.  There is no way to have dual permissions on a field (either add deny or hide he field due to the permission)? Perhaps the watcher field?

similar to the permissions scheme that allows some users to see fields or not see fields?

example. 

GroupA- Developers

-user1

GroupB-Users

-user2

issue1

-user1 > adds user to watcher field > permission > allows add

-user2 > adds user to watcher field > permission > denies add