Set up Issue security for request participants using Automation in JSM Cloud

Summary

When a security level is set for a JSM issue, Request participants can't view the issue from the customer portal.

Solution

Error when trying to view the request

When a request participant tries to view an issue with a security level set, they receive an error: "No Access. You do not have permission to view this request."

The "Request participants" field is not available when configuring a security level, so we can't configure Request participants to view these issues. We have a Feature request to provide this functionality:

• JSDCLOUD-1703 - Make "Request participants" custom field available to security level configuration

Allow participants to view requests using Automation

The Automation approach (for posterity) uses a multi-user picker custom field (e.g. Req Participants Copy) added to the security level, plus a rule that copies Request participants into it so participants match the level.

Known limitation to keep: this does not trigger notifications to the request participants.

Configure Security Level

1. Create a multi-user picker custom field called Req Participants Copy.

2. Add this field to all the relevant screens. No need to add it to the Request form.

3. Add this newly created custom field to the necessary Issue Security levels that should allow request participants to view an issue.

First Automation rule: Copy Request Participants

Create an Automation rule that updates the new field, Req Participants Copy, on any changes made to the Request Participants field.

1. Go to Project Settings > Automation.

2. Click on Create rule.

3. Select Trigger Field value changed.

   Field: Request Participants. Change Type: Any changes.

4. Create a new action, "Edit issue." Select the custom field Req Participants Copy.

   1. Click on the 3 dots to copy Request Participants to the new field Req Participants Copy.

   2. Uncheck the "Add to existing values" box.

5. Click Save, then turn it on.

Second Automation rule: Send notification to new participants

The notification for new participants needs to be done through automation, as Jira won't send the customer notifications for request participants when a security level is configured.

After the access is granted in the first automation rule, we need a new automation rule to notify them:

1. Go to Project Settings > Automation.

2. Click on Create rule.

3. Select a Trigger Field value changed.

   Field: Request Participants. Change Type: Value Added.

4. Add a new branch and select "Advanced branching" to iterate the Request participants list and send emails only to the newly added users (whose names are added to the changelog under addedfieldChange.values).

   Smart value: {{issue.Request Participants}} Variable name: participant.

   • Within that advanced branching, add the following Condition:

     • First value: {{addedfieldChange.values}}

     • Condition: contains.

     • Second values: {{participant.emailAddress}}

   • Add Action to send email to participant using smart value - {{participant.emailAddress}}

5. Click Save, then turn it on.

To confirm your rule works, as a request participant, open a security-restricted request from the portal and confirm the "No Access" error no longer appears.

Contact Atlassian support if you have any questions.