Uploaded image for project: 'Jira Align'
  1. Jira Align
  2. JIRAALIGN-3397

Dependencies>Reject Button displays even with permission toggled off

    XMLWordPrintable

Details

    • 1
    • Severity 3 - Minor
    • No

    Description

      Issue Summary

      In Dependencies>Details panel

      The action button "More Action" > Reject does not seem to be controlled by any role and appears even when "manage agile object" and all toggles inside Program>Manage>Dependencies are off

      Steps to Reproduce

      1. Login as a user with "Capability" role enabled, but no editing permission (save/create/delete permission disabled)
      2. Edit a Dependency and look for More Action>Reject
      3. Notice the option actually allows a user to reject the dependency

      Expected Results

      Per to Batman team's advise, 'Reject' option should be paired with the 'Save' permission toggle (i.e. if the user does not have the ability to 'Save' then they should not have the ability to 'Reject' since that action itself is "editing/saving" the dependency).

      Actual Results

      Reject option is available even with "Read Only" (save/create/delete permission disabled)

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

      Attachments

        Activity

          People

            dfuller@atlassian.com Don Fuller
            0ed961e27eb4 Erwann (Inactive)
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Backbone Issue Sync