Customize Service Desk issue confidentiality
Problem to solve
An organization desires to default issues created by Service Desk to non-confidential so that they can be visible by anyone with access to the project.
Intended users
This feature would be used by organizations where issues created by the Service Desk should be viewable to all who have access to the project.
Proposal
Allow the confidentiality to be user configurable. This would be defaulted to confidential so there is no change to the current behavior, but would give users the option of configuring this setting.
From #33091 (comment 1869534107)
- Introduce new feature flag
service_desk_tickets_confidentiality
. - Add a new db field
tickets_confidential_by_default
inservice_desk_setting
to store whether issues/tickets should be confidential (default:true
). I'd go with this name because in issues we useconfidential: true|false
so it feels more descriptive to usetickets_confidential_by_default
instead oftickets_public_by_default
. - Add a checkbox to the Service Desk section in the general settings. This setting is only visible or selectable if the project is either
private
orinternal
. It's not available forpublic
projects as this may expose confidential information to unauthenticated users. - In the email/issue processing only mark a new issue/ticket as
not confidential
if it's notpublic
and thetickets_confidential_by_default
isfalse
.
Permissions and Security
TBD
Documentation
Documentation for the configuration options would need to be updated.
Testing
TBD
What is the type of buyer?
This would only be available for those users who have existing access to the Service Deks.
Links / references
Edited by Marc Saleiko