Unable to Access Private Filters via Jira Cloud API

[Pedro Batista]

We’re trying to retrieve filters from the Jira Cloud API using user impersonation (in Java, with JWT). However, we’re unable to access certain filters if they’re private, even when the impersonated user is the creator or the filter is shared exclusively with them.

From what we’ve found, there seem to be only two options:

1. Use basic authentication (which isn’t suitable for our case), or
2. Use the overrideSharePermissions query parameter in the request.

The problem is that overrideSharePermissions is marked as experimental, so it may not be a reliable long-term solution.

Has anyone encountered this issue before? Any suggestions on how we might work around it?

[Tomislav Tobijas · Accepted solution]

Hey @Pedro Batista ,

Can you maybe share what's the end goal here? And also, why do you prefer using REST APIs over a manual approach?

I'm not sure about overrideSharePermissions but you could maybe use Change filter owner (also experimental; although my guess is that this is relatively new and will stay as-is) where, once you change the owner to yourself (or some other user), you could change filter view/edit permissions.

Again, usually experimental means something is quite new, and from my experience, they usually remove experimental note after some time unless there are some big issues with new call, endpoint...

Cheers,
Tobi

[Pedro Batista]

Hey @Tomislav Tobijas ,

Our main goal is to retrieve filter details using the filter ID. The issue we’re facing is that, when using JWT authentication, we’re unable to access the filter details—even when the token’s issuer is the filter’s creator.

For example, I can successfully retrieve the filter with ID 10066 in my browser using the endpoint rest/api/3/filter/10066. However, the same request fails when made with a JWT token.

So far, we’ve only found two ways to make it work:

1. Change the filter’s permissions (e.g., set it to "My organization").
2. Enable the experimental flag.

[Tomislav Tobijas]

Ah okay. This is related to Atlassian Connect (guessing Forge uses this too?), in a way.

I haven't been playing much with JWT authentication and I'm not sure if you'll get the help you need on this forum.
I would suggest trying Atassian Developer Community as there are a lot of people who, I believe, worked on similar things.

Sorry, I couldn't be much of a help here.