Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-13302

It is possible to see components without logging in

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: High High
    • 3.10.2
    • 3.10.1
    • None
    • Edition Enterprise
      Version 3.10.1
      Build Number 261
      Installation Type JIRA Standalone

      It is possible to see project's components without logging in by just guessing urls, e.g. [jira-installation]/browse/KEY/component/10881.

      This will show all the information written on component (issues are not shown). This should be restricted so that it is impossible to see any project information without correct permissions.

              Unassigned Unassigned
              8407b6966c3e Teemu Qvick
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: