-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
Severity 2 - Major
Issue Summary
When an admin invites external users to the organization's using the "invite button" and the permission to the product is granted using a non-default group, if the user tries to access the product using the link they receive on email, they are unable to join the site and are redirected to home.atlassian.com instead.
Steps to Reproduce
- Have a domain verified
- Invite an external user to the organization (not from the verified domain) granting access to a product using a non-default group
- The user tries to access the site using the invitation link he receives in the email.
Expected Results
The user is supposed to access the product on the respective site where he was granted access.
Actual Results
The user receives an error and is redirected to home.atlassian.com instead of the actual org site from which the invitation was sent.
In the dev tools, we see the following error recorded:
{ "code": 403, "message": "Access by external users not allowed. https://support.atlassian.com/security-and-access-policies/docs/understand-external-user-security/" }
Workaround
At the moment, the only known workaround is for the users to access the product using the site URL directly.
- mentioned in
-
Page Loading...