Idea
If time tracking is activated in JIRA and a user has the rights to browse a certain project, there is no way in JIRA to restrict access to time tracking information, i.e. time logged with all description details as well as work estimates will be visible to a user who has access to issues. Even though you can restrict the right to log time, you can't prevent users from seeing time tracking information, and you can't restrict access to the fields "Original estimate" and "Remaining estimate" (these fields appear even of you do not grant the "work on issues" permission). This might be perfectly okay within a developper team, but probably is generating huge problems if you grant your customers access to a project. There is no proper solution for this as JIRA does not offer this level of permissions.
...
As we think that it is essential that you decide whether your clients have at least some control on who can see time tracking information displayed by in JIRA or not, we have added a small workaround to ictime that helps you to at least superficially hide this information from your customers in some places. This is work in progress, as we did not yet find identify all places where time tracking solution appears.
...
Permissions
| Warning |
|---|
This solution is JavaScript-based and only manipulates display of the some data on the frontend. Any user with very basic programming knowledge will easily be able to get access to the information. In addition, there might be other are places where time tracking information appear that we still did not find and could not apply our script hide (feedback is welcome). However, as JIRA does not offer a proper solution, we consider this solution still much better than simply displaying all data everywhere. Most customers have neither knowledge nor time or motivation to hack JIRA to get access to time tracking information (they might not even know that you track time via JIRA). |
...