User without permission is able to invite new users to the site through Invite people to Jira Software option

XMLWordPrintable

    • Minor

      Issue Summary

      A user with basic role is able to invite new users to the site through Invite people to Jira Software option inside the project, even with the Site access option:

      • New users can't request access - enabled
      • Existing users can send invitations to anyone - disabled

      Steps to Reproduce

      • Inside Site access, enable the option New users can't request access, and disable Existing users can send invitations to anyone.
      • Give a basic role to an user > access a project with this user
      • Try to assign an issue to someone outside the site > click on Add teammate to Jira

      The same behavior occurs when clicking on People > Invite a teammate:

      Expected Results

      Not able to invite new user

      Actual Results

      The user is invited and an access request is sent for admin approval.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

        1. image-2022-06-17-15-29-23-758.png
          11 kB
          Diego Leitao
        2. image-2022-06-17-15-32-12-613.png
          33 kB
          Diego Leitao

            Assignee:
            Unassigned
            Reporter:
            Diego Leitao
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: