Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-10308

Giving Manage Watchers Permission to Reporter or Current Assignee allows anyone who can view the watchers list to edit it

    XMLWordPrintable

Details

    Description

      Hi, this issue (see original one) is happening again in 3.6.2; when you grant Manage Watcher List permission to "Reporter", everyone in the jira-users group can modify the watcher list of all the tasks in the system

      Attachments

        Issue Links

          is cloned from

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-9575 Permission-Bug in Manage Watcher List

          • Medium - Medium priority issues
          • Closed

          Activity

            People

              jed Jed Wesley-Smith (Inactive)
              98e942710a88 Emilio Moreno
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: