-
Bug
-
Resolution: Fixed
-
Medium
-
None
-
10.38
-
Severity 3 - Minor
-
System Roles Set delete stories object role to toggled off, but admin manage agile objects is on
-
-
users can still delete stories.
-
Party Parrots - TART3
-
No
STR:
System Roles: Set 'delete stories object' role to toggled off, but admin 'manage agile objects' is on
AR: users can still delete stories.
ER: Object-level permissions such as story or epic should control who/what can be deleted, Admin-> Addtl Options->Delete Agile Objects should not override other permissions and should be removed. Admin Manage Agile Objects should not enable the deletion of stories if users do not have permission to delete stories.
- is related to
-
JIRAALIGN-1030 [JIRAALIGN-1030] Product Manager Role unable to estimate Features
- Future Consideration