"JIRA Project Releases" event should respect Project's permissions

XMLWordPrintable

    • Severity 3 - Minor

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      Adding "JIRA Project Releases" event type to the Team calendar seems to NOT respect permissions from the project. It means even people that have no access to some project will see the release dates from the forbidden project.

      Expected behavior: Users should see only "JIRA Project Releases" from projects to which they have access.

      I was surprised a lot that it doesn't work this way and I consider it big issue with security.

        1. JIRA_Project_-_Roles.png
          101 kB
        2. refresh-event.png
          15 kB
        3. team-calendar-issue-visibility-problem.jpg
          166 kB

              Assignee:
              Minh Tang (Inactive)
              Reporter:
              Nikola Bornová
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: