Uploaded image for project: 'Jira Align'
  1. Jira Align
  2. JIRAALIGN-6855

User can select Team from Program they are not part of as 'Requesting Team' in Dependency creation

XMLWordPrintable

    • 1
    • Severity 3 - Minor
    • No

      Issue Summary

      The user was able to select the Team from the Program they are not part of as the 'Requesting Team' and successfully created a Dependency.
      I can understand this behavior is expected for the "Depends on" team field but for the "Requesting Team" field, this should not be possible.

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Inpersonate the user account that only has access to the particular Program
      2. Create a new dependency and select the Team from a different Program in the "Requesting Team" field
      3. Save it.

      Expected Results

      User cannot view or select a Team from a Progam they are not part of

      Actual Results

      User can view and select a Team from a Progam they are not part of and can successfully create Dependency.

      Workaround

      Currently, there is no known workaround for this behavior. A workaround will be added here when available

              9430c2193c41 Bhanu Vanjaku
              d5e5bcff7211 Joe Win
              Votes:
              1 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: