Published Date: May 26, 2026
Validated: Yes
Audience: Everyone
Products and Versions Covered:
-
Jama Connect®
Cloud/CVC
Self-hosted
Summary
In Jama Connect, access to items can be restricted at the component or set level. However, attachments and Test Plans/Cycles/Runs do not follow those restrictions. Both are controlled only by project-level permissions. A user with read access to a project can access attachments added to restricted items and open Test Plans that include Test Cases from restricted components.
Behaviour
- Attachments. When a file is attached to an item inside a restricted component, the attachment is stored at the project level, not the component level. Any user with project read access can reach that attachment — either through the “Existing” tab in the Add File Attachment dialog, or via the Activity Stream.
- Test Plans, Test Cycles, and Test Runs. These objects are governed by project-level permissions regardless of the component-level restrictions on the Test Cases they contain. If a Test Plan includes Test Cases from a restricted component, any user with project read access can open that Test Plan, its Cycles, and its Runs.
Resolution
- Attachments. Move sensitive attachments to a separate project where restricted users have no project-level access. Setting the Activity Stream to hide attachments by default is a partial mitigation, but users can override that filter in their own settings.
- Test Plans, Test Cycles, and Test Runs. Create a separate test project and restrict access to only the users who should see its content. Traceability links between test items and requirements work across projects, so cross-project traceability is preserved.
Additional Resources
- Success Programs
- Success Catalog
- Datasheets
- Request a Solution Offering or Training from the Success Catalog
Feedback:
We welcome your input! Please sign in to leave any comments, suggestions, or improvement ideas below.
Comments
0 comments
Please sign in to leave a comment.