Jira "create issue" form - make "Security Level" blank and required
Motivation
Twice I have accidentally submitted security issues without touching the "Security Level" field, thereby leaving the issues publicly visible. Both times, I immediately realized my mistake and corrected it, but this mistake is too easy to make.
How it works
- Jira has a form to add a new issue.
- On the form, there is a field called "Security Level" which is set to "Security - Unpublished" by default.
- There is no blank option for this field.
- If the user overlooks this field, then the issue is public
How it should work
Option A
- That field should be set to an empty string by default
- If a user tries to submits a ticket without touching the field, then Jira should complain that the field is not valid.
Option B
- Re-order the field so that it comes directly after "Summary" (and thus is harder to overlook)