Need to ensure that if a level (group name) for the created comment is provided, JIRA validates that the group exists and that the user is a member of the provided group.
Description
Need to ensure that if a level (group name) for the created comment is provided, JIRA validates that the group exists and that the user is a member of the provided group.
Currently in 3.7 if you add a comment (through SOAP) with a user that is not a member of the group, it will throw an RemoteException.
However, if you add a comment with
group level set to a non-existent group, it throws RemoteException that user is not in the group (Should say group does not exist instead)
role level set to a non-existent role, it ignores the value set and adds the comment visible to all (Should say role does not exist instead of adding the comment?)
Sam Chang [Atlassian] added a comment - 08/Jan/07 12:12 AM Currently in 3.7 if you add a comment (through SOAP) with a user that is not a member of the group, it will throw an RemoteException.
However, if you add a comment with
group level set to a non-existent group, it throws RemoteException that user is not in the group (Should say group does not exist instead)
role level set to a non-existent role, it ignores the value set and adds the comment visible to all (Should say role does not exist instead of adding the comment?)
Sam Chang [Atlassian] added a comment - 08/Jan/07 06:20 PM fixed for 3.7.2
SOAP client will now throw a RemoteException if the group or role does not exist.
Bug
Resolved
Major
AddComment in SOAP does not validate if the provided group exists.
However, if you add a comment with