-
Bug
-
Resolution: Won't Fix
-
Medium
-
None
-
7.2.0-OD-01, 7.2.0-OD-02, 7.2.0-OD-03, 7.2.0-OD-04
-
7.02
-
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.
SUMMARY
Users without Browse Users permission are able to get autocomplete for assignee field in JIRA issues.
This does not affect JIRA issue navigator basic mode for assignee dropdown.
STEPS TO REPLICATE
- Create a user without Browse Users global permission
- Create an issue
- Try to edit the issue's assignee
EXPECTED RESULT
JIRA shouldn't provide users without Browse Users permission to get autocomplete feature for usernames - only using complete usernames to assign the issues to others.
- derived from
-
JRASERVER-25773 Groups with no "Browse Users" Permission are Able to Select Assignees During Issue Creation
- Closed
- relates to
-
JRASERVER-27212 Users with "Assign Issues" permission do not see a User dropdown unless they also have "Browse Users" permission
- Closed
-
JRACLOUD-59806 Users without Browse Users permission are able to get autocomplete
- Closed