Jira GDPR Compliance - cannot request scope

Jira Development Jira Cloud
1

I am building out our GDPR compliance before we start storing any user data following this documentation. However, whenever I try and request the report:personal-data scope via the oauth routes upon connection I don’t ever receive the scope back in the token response; when I try to use the to the token without the scope I receive a 401, missing scopes response.

  1. I have configured the personal reporting API in the console

  2. I’ve tried checking and unchecking this box

  3. I have verified the scope is being requested in the oauth flow.

I’d include screenshots, but I can only upload one at a time :frowning_face:

Are there any other steps I should be following to get this scope added to my token or is this functionality just broken?

2

just to make sure nothing in my oauth flow was broking, I validated that I was successfully able to add the manage:jira-project scope - so something seems different about this report:personal-data scope from the other scopes. Do I need to get my organization approved by jira to access the scope and become GDPR compliant?

3

This is a bug and being tracked here:

ECO-533: Consent screen shows error when only report:personal-data is requested and if other scopes are also included then the access token returned does not include the report:personal-data scope

Regards,
Deepak

2 Likes