Customize Service Desk issue confidentiality
Problem to solve
An organization desires to default issues created by Service Desk to non-confidential so that they can be visible by anyone with access to the project.
Intended users
This feature would be used by organizations where issues created by the Service Desk should be viewable to all who have access to the project.
Proposal
Allow the confidentiality to be user configurable. This would be defaulted to confidential so there is no change to the current behavior, but would give users the option of configuring this setting.
From #33091 (comment 1869534107)
- Introduce new feature flag
service_desk_tickets_confidentiality. - Add a new db field
tickets_confidential_by_defaultinservice_desk_settingto store whether issues/tickets should be confidential (default:true). I'd go with this name because in issues we useconfidential: true|falseso it feels more descriptive to usetickets_confidential_by_defaultinstead oftickets_public_by_default. - Add a checkbox to the Service Desk section in the general settings. This setting is only visible or selectable if the project is either
privateorinternal. It's not available forpublicprojects as this may expose confidential information to unauthenticated users. - In the email/issue processing only mark a new issue/ticket as
not confidentialif it's notpublicand thetickets_confidential_by_defaultisfalse.
Permissions and Security
TBD
Documentation
Documentation for the configuration options would need to be updated.
Testing
TBD
What is the type of buyer?
This would only be available for those users who have existing access to the Service Deks.
Links / references
Edited by Marc Saleiko