-
Bug
-
Resolution: Fixed
-
High
-
10.107.4
-
1
-
Severity 2 - Major
-
No
Issue Summary
Ideation Group's externally accessible URL remains active even though Make Public setting is switched off
Disabling public access to any given Ideation Group does not prevent previously approved external users from gaining access to the externally accessible URL previously allowed.
Steps to Reproduce
- As a Super Admin, browse to Ideation
- Setup any given Ideation Group as follows:
- Define Admins and Internal Contributors
- Switch on (check) Make Public
- Switch on (check) Approve External Users
- Save
- Launch a separate browser window, in incognito window mode
- Browe to the URL rendered in the External Link
- Bookmark that URL, for future use
- Enroll an external user
- Get back to the Ideation
- Approve the external user request
- Get back to the incognito browser window then login to the Ideation group by using the credential provided (as the external ideation user)
- Create or edit an idea
- Log out
- Close out the incognito mode window
- Back in Jira Align, as a Super Admin, uncheck (switch off) the Ideation Group Make Public setting, then Save & Close
- Launch a separate browser window, in incognito window mode
- Browe to the bookmarked URL, then login to the Ideation group by using the credential provided (as the external ideation user)
Expected Results
- Once the Make Public setting is unchecked (switched off), external users are unable to login to the External Link URL
Actual Results
- Despite the Make Public setting being unchecked (switched off), external users are still able to login to the External Link URL