Currently, several permissions have been granted to the "Customer Portal Access" entity, despite the functionality to provide these permissions the customer user types not being in place yet.
These permissions have been granted as placeholders for potential future feature releases.

This means, that as soon as such a feature gets release, and the JIRA Admin of the JIRA environment upgrades Service Desk, the customers in that environment will automatically get that permission granted.
This can pose a security issue if the JIRA Admin does not want customers to have these permissions.

Please remove these placeholders to prevent the potential security issue from above to occur. Instead, we need to properly inform customers when new feature become available, and which steps they need to take in order to provide these features to their customer.