Severity 3 - Minor
In the roadmap, users can see themes from a portfolio that they have no permission (that they do not belong).
Steps to Reproduce
Prerequisites: Jira Align environment with 2 portfolios, each with at least 1 theme created
- Find/create a user (not super admin) who can see the roadmap and themes
- Set the user to have permission for 1 portfolio only
- Login as the user
- Reset all filters on the top/tier1 configuration
- Open the roadmap
- Select 'Work > Themes'
- Select 'Month by Quarter'
The user can see only the themes from the portfolio he/she is a member of.
(Same experience as the themes grid or the backlog view).
The user can see all themes from both/all portfolios.
To workaround, this behavior you should make sure to select a program in the tier1 configuration.