Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-20916

Shared filter queries don't work with gadgets' results if login user doesn't have permission to access one or more issues or projects included in the results

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.

      Steps to Reproduce:

      1. Create a shared filter having similar JQL:

      project in (PROJECT1, PROJECT2) ORDER BY created DESC
      

      2. Login as a user having only browse permission for "PROJECT2".
      3. View the filter in issue navigator.
      4. It shows user the number of issues allowed to see. Add a "filter results" gadget on the dashboard.
      5. Select the filter.

      Result:

      The user gets error message "The selected filter filter-<ID> has an error: A value with ID '<ID>' does not exist for the field 'project'..

      Expected:

      Here also user should be able to view issues from project having browse permission.

      Update

      The same happens when issue keys are specified in the filter query, but then the issues have a security level whose the login user does not have permissions on. In that case the issue key will be replaced by the issue ID in the search when opening the results, which breaks the search:

      Issue does not exist or you do not have permission to see it.
      

      Notes

      Attempting to access the XML view of a filter with this configuration will result in a HTTP 400 with an error similar to "HTTP Status 400 - A value with ID '10000' does not exist for the field 'project'." as per the attached image.

      Attachments

        1. Filter.jpg
          Filter.jpg
          57 kB
        2. HTTP 400 Error.png
          HTTP 400 Error.png
          29 kB
        3. Screen Shot 2022-04-28 at 10.07.00.png
          Screen Shot 2022-04-28 at 10.07.00.png
          91 kB
        4. Screen Shot 2022-04-28 at 10.09.21.png
          Screen Shot 2022-04-28 at 10.09.21.png
          127 kB

        Issue Links

          Activity

            People

              Unassigned Unassigned
              rguler Rahmani Guler [Atlassian]
              Votes:
              29 Vote for this issue
              Watchers:
              39 Start watching this issue

              Dates

                Created:
                Updated: