-
Bug
-
Resolution: Fixed
-
Medium
-
3.11
-
Standalone, Tomcat 6, JDK 1.5.0_08-b03
-
3.11
-
Sub-tasks are supposed to inherit the security level of the Parent task. If the Parent task's security level is changed such that a second user can't see it, the Sub-task should be hidden as well.
What's happening is that the Sub-task is still being shown. If you secondary user attempts to view the issue, he is denied.
To recreate the issue, do the following:
- Create two security levels in Issue Level Security
- Private: Admin User only
- Public: jira-user Group
- Create a Parent Task, and a Subtask
- Make the Parent Task Public
- Confirm it's visible in the Issue Finder by another user that is not Admin
- Change the Parent Task to Public
- Use the Issue Finder by another user other than Admin and the Subtask is still visible (although the Parent is not).
- If I attempt to open the Subtask, I'm denied permission.