Secure Custom Fields for Jira
Secure Custom Fields for Jira (Security & Permission) (hereinafter referred to as Secure Custom Fields for Jira) is an application developed by Ricksoft to extend the functionality of Jira.
It is available for the Atlassian Cloud version of Jira.
Secure Custom Fields for Jira
For enhanced security and privacyThis application allows administrators to
set detailed access permissions for each custom field in Jira.
Each field can be hidden or made read-only.
Jira has a standard function that allows you to set viewing and editing permissions on a per-issue basis.
However, it is not possible to set permissions per field.
Therefore, if we wanted to separate who could view or edit each field, we needed to separate issues.
For example, if you want to make salary information viewable only by personnel and personal information such as addresses viewable not only by personnel but also by supervisors for personnel-related informationIf you want to make personal information such as address viewable not only by HR but also by the supervisor, you would need to submit a separate Jira issue, even though the information is about the same person.
However, if you can set permissions with custom fields, you can manage them in a single Jira issue.
In addition, creating multiple Jira issues with high security requirements requires the creation of multiple security rules, which in turn poses a risk.
Against this backdrop, we have received many requests from our customers for a cloud version of our app that allows them to set permissions for each field. Now that the environment for developing applications for Atlassian's products has been established, it has become possible to develop this application, and we decided to develop it.
As with standard custom fields, Jira administrators are free to create custom fields for their own use.
The usability of the fields, such as translation and association to screens, is no different from the standard ones.
For each field value display and edit, the Jira administrator can fine-tune which users are granted privileges.
Permissions can be flexibly controlled for groups, users, project roles, as well as assignees and reporters.
If the user has read permission, the field will be displayed on the issue screen just like a normal field.
Field values are encrypted and then stored in Jira just like regular custom fields.
All data processing and retention takes place within Jira and no data is sent to the developer Ricksoft.