Details
-
Bug
-
Resolution: Fixed
-
Medium
-
2.1.5, 2.2.2, 2.14.0
-
1
-
Severity 2 - Major
-
21
-
Description
NOTE: This bug report is for JIRA Portfolio Server. Using JIRA Portfolio Cloud? See the corresponding bug report.
Summary
In Plan configuration > Permissions > Plan access. Non-admin users can try to add Viewers and see all users/groups on the instance.
Steps to Reproduce
- Login as non-admin user
- Create a plan
- Go to Plan configuration > permission
- Try add users or groups
Expected Results
- Only groups that the user are belong to should be listed
- Only users that has "Browse Users" in Global Permission should be able to list all users
Actual Results
All users and groups are listed (max 50 on drop down)
Workaround
None
Attachments
Issue Links
- relates to
-
JSWCLOUD-19238 Non-admin User Should not be able to see all users/groups in drop down
- Closed
-
JPOS-1681 Loading...