Description

Issue Summary

If a Proforma form is added to a ticket and marked as external so that customers are able to view and submit it on the portal, if the customer user doesn't have a JSM license they will be unable to submit the form and get an error message. Users that have licenses are able to submit forms via the portal without an issue.

Steps to Reproduce

1. Create a Proforma Form for a JSM project
2. As a customer (unlicensed user) navigate to the portal and submit a ticket
3. As an agent, open the ticket the customer submitted within Jira itself (not the portal) and add the form - but do not submit the form.
4. Mark the form as external.
5. As a customer go back to the portal and that ticket.
6. Attempt to fill out the form and submit it.

Expected Results

The customer should be able to submit the form without an issue.

Actual Results

User gets a 403 on the following endpoint when trying to submit:

<JIRA_BASE_URL>/rest/proforma/api/2/issues/ITSD-42/forms/1

In the UI user gets an error message stating Error happened:

Error: Saving form failed
A server error occurred while trying to save the form.
Please refer to our Error Explanations page for more details

Additionally, the form cannot be downloaded. Nothing happens when clicking on "Download PDF" and "Download Rich PDF", and the URL below returns a 403 error code:

<JIRA_BASE_URL>/rest/proforma/api/1/issues/ITSD-43/forms/3/pdf

Workaround

The impact of disabling these feature flags:

As part of Jira 10.0 release, we had added enhanced security by default for the endpoints as mentioned in the release notes.This enhanced security feature will be disabled when you disable these feature flags.