Defect #44306
closed
Image and file visibility issue in private comments
Description
When I add a private comment containing inline images and attachments, users without access to private notes can still view these files. Since it is a private comment, these images and attachments should be restricted to the internal team and hidden from other users.
Related issues
Updated by Holger Just about 13 hours ago
- Is duplicate of Feature #12677: Private attachments for issues added
Updated by Holger Just about 13 hours ago
- Status changed from New to Closed
- Resolution set to Duplicate
Attachments are stored on the issue and are thus conceptually like any other issue field of the issue. Thus, attachments (and all other issue fields) are visible if the issue itself is visible. When adding a private note, only the note itself is considered private.
In any case, this is a duplicate of #12677. I'm closing this issue as such.
Updated by leonardo steil about 13 hours ago
But that doesn't make much sense. If I'm marking the note as private and attaching something to it, my goal is to keep the attachments private.