Summary

In Jira 10, customers are not able to download PDFs of forms from the portal

Description

Issue Summary

Starting in Jira 10, the new security endpoints introduced as noted in the release notes requires licensed users to access endpoints. This is causing portal customers (who are not agents) to be unable to download forms as a PDF or Rich PDF.

Steps to Reproduce

1. Create a JSM project that has a Form exposed on the portal
2. Create an issue as an customer (not an agent)
3. Load the issue in the portal and attempt to download the form as either an PDF or RichPDF while collecting a HAR file.

Expected Results

Users should be able to download the forms as a PDF or RichPDF.

Actual Results

Customers will get a 403 error message in a HAR file and the PDF will never download.

Workaround

The workaround for this issue involves disabling the below two Dark Features flag:

com.atlassian.jira.security.annotations.disabled

atlassian.rest.default.to.licensed.access.disabled

The impact of disabling these feature flags:

As part of Jira 10.0 release, we had added enhanced security by default for the endpoints as mentioned in the release notes.This enhanced security feature will be disabled when you disable these feature flags.