-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Medium
-
Component/s: Notifications - Email
-
None
-
1
-
Severity 3 - Minor
Issue Summary
When a task checkbox is checked or unchecked on a page with view restrictions (direct or inherited from a parent page), email notifications are sent to users who do NOT have view access to that page.
Steps to Reproduce
- Create a space restricted to specific individuals
- Create a page with view restrictions (explicit user list)
- Create a child page (inherits parent restrictions)
- Add a task on the child page and assign it to User A (who has access)
- Unassign or reassign the task (toggle the checkbox)
- Result: User B (who does NOT have view access) receives an email notification about the task change
Expected Results
Task assignment/unassignment notifications should validate the recipient's view access before sending — consistent with how @mention notifications already suppress emails for users without page access.
Actual Results
Users without view access receive email notifications containing the task description, page title, space name, and a "View page" link they cannot access.
Workaround
n/a