Jira ServiceDesk API - 响应突然缺少字段 emailAddress

Jira ServiceDesk API - response suddenly missing the field emailAddress

我正在从 Jira ServiceDesk API 获取组织中的用户列表,如 documented on this page

到目前为止,这是按预期工作的,但今天突然间代码被破坏了。也就是说;我从 API 得到的结果已经改变。正如文档所述,我应该获取包含字段 emailAddress 的值。然而,从今天开始,我得到了正确的用户,但不再有 emailAddress 字段。以下是我收到的结果(结构):

{
  "size": 1,
  "start": 0,
  "limit": 50,
  "isLastPage": true,
  "_links": {
    "self": "https://someprefix.atlassian.net/rest/servicedeskapi/organization/1/user?start=0&limit=50",
    "base": "BaseURL",
    "context": ""
  },
  "values": [
    {
      "accountId": "123456:SomeGUID",
      "name": "SomeUserName",
      "key": "someusername",
      "displayName": "Some Username",
      "active": true,
      "timeZone": "Europe/Amsterdam",
      "_links": {
        "jiraRest": "LinkToTheThisUser",
        "avatarUrls": {
          "48x48": "LinkTo48X48Url",
          "24x24": "LinkTo24X24Url",
          "16x16": "LinkTo16X16Url",
          "32x32": "LinkTo32X32Url"
        },
        "self": "LinkToThisResource"
      }
    }
  ]
}

我要求检查设置 User email visibility,目前仅设置为 logged in users

我的问题:

好吧,看来是this is by design to keep in line with GDPR guidelines。长话短说; emailAddress 将不再可靠地成为 API 的一部分,因为用户现在必须同意它。如果不是所有用户的 emailAddresses 都是响应的可靠部分,这会导致同步应用程序中的比较域很差。

Which profile information will apps be able to access?

Any personal information users set as Anyone will be available for apps to use. For example, apps will be able to access this information, store it, and show it to other users.

Users' local times and locations will always be available to apps, regardless of their visibility settings. This lets apps customize their experiences.

Users' email addresses will be available to some apps that have been approved by Atlassian. Note that if a user chooses to set their email address to Anyone, then any installed apps will be able to use it.

When users install apps, the apps will request that they consent to share their profile information with the apps. If they consent, the apps will have access to all of their profile information. This is not applicable to admins.

不过。将有一个新的 API 允许访问用户电子邮件地址,而不管用户设置如何。访问此 API 仅限于已批准的应用程序。有关更多信息,请参见 on this page.

In order to apply for access to this API the app must meet all current requirements for being listed on Atlassian Marketplace (even if the app is not listed on Atlassian Marketplace).

This means:

  • The app developer has provided a privacy policy
  • The app developer has provided a customer terms of use agreement
  • The app developer must signal whether or not the app collects and stores personal data.
  • If the app is storing personal data the app must report the accountIDs that have been collected and stored every 15 days.