Where can i file a bug report for JIRA Scriptrunner? Field level permissions can be bypassed

[Frank Adler]

JIRA Scriptrunner behaviour used to set field level permissions can be bypassed using the shortcut to access the field and than change the field only using the keyboard.

[Alexey Matveev]

Hello,

Behaviours only hide a field with a java script code, which can be bypassed. If you want a more secure solution, kindly have a look at this add-on:

https://marketplace.atlassian.com/apps/23216/field-security-plugin-for-jira?hosting=server&tab=overview

[Frank Adler]

Hello Alexey,

thanks for pointing that out - I'll check our requirements.

Regards,
Frank