Details
-
Bug
-
Resolution: Fixed
-
Low
-
5.0, 4.4.4
-
None
-
4.04
-
Description
If a user is deactivated, which means it belongs to no existing group in JIRA, it is still able to be set as an issue watcher if it has the Browser Project Permission.
Steps to replicate:
- deactivate an user.
- ensure it has Browse Project permission.
- try to add it as watcher in any existing issue on the project it has the permission to browse.
Attachments
Issue Links
- was cloned as
-
JRASERVER-41302 Deactivated user is allowed to be added as watcher in v6.2.3#6260
- Closed