If In JIRA, if
- time tracking is activated in JIRA
- and a user has the permission to browse a certain project,
there is no way in JIRA to restrict access to time tracking information, i.e. time logged with all description details as well as work estimates and remaining estimates will be visible to a every user who has access to issues! Even though you can restrict the permission to log work in JIRA, you can't prevent users from seeing time tracking information, and you can't restrict access to the fields "Original estimate" and "Remaining estimate" (these fields appear even if you do not grant the "work on issues" permission).
...
an issue!
| Tip |
|---|
For more information, refer to http://jira.atlassian.com/browse/JRA-2364 and http://jira.atlassian.com/browse/JRA-27613. There is also a plugin that solves the issue in a proper way (https://plugins.atlassian.com/23216), but this requires a JIRA core patch and still there is a way to get time tracking information if you know how. |
As we think that it is essential that you have at least some control on who can see time tracking information in JIRA, we have We have added a small workaround to ictime that helps you to at least superficially hide this information, e.g. from your customers, in some places.
...
| Warning |
|---|
JIRA does not have a "field-level-security" concept, so that it is impossible to configure JIRA to hide certain fields - like time tracking data - in case a user has the permission to access an issue. All approaches to solve this issue without changing the JIRA core can only be very limited workarounds, as they can't solve the problem that JIRA will deliver time tracking data from the backend. Our workaround only removes data on the frontend. It is not difficult to get the data with respective tools or by deactivating JavaScript. |
| Info |
This workaround covers data displayed in JIRA itself. ictime does not have any control over time tracking data displayed by other plugins. Unfortunately, this also applies to JIRA Agile. Even though this plugin is an Atlassian plugin and tighly integrated into JIRA, it does not provide us with the mechanisms to access data and detect user actions that we require to eliminate time tracking data in a reliable way. |
...
Configuration
Go to
ictime - Administration - Permissions - JIRA
...