Hello,
is there any way to exclude a custom field from search index (to prohibit a search by this field)?
I'm evaluating a plugin that implements field security schemes and allows to flexibly restrict access to some fields. Value of a restricted field is correctly shown for users who has access to it (including issue navigator and email notifications) and is hidden from others. But when a users without access to a restricted field search by it with JQL (i.e. "Salary = 1000"), they can 'guess' the value.
Thank you,
Serhii
You could remove the searcher from the field (go to custom fields, find your field and use "edit" - that allows the name and searcher to be changed)
This will completely remove it from search and sort, globally, not for some users.
If you're using the add-on I think you are, then yes, it's a known weakness that fields are still exposed to search, even if a user has zero access to the field.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.