Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-42291

"Delete Own Attachments" permission is not sufficient for a user to delete their own attachments

    XMLWordPrintable

Details

    Description

      ...and similarly for "Delete All Attachments"

      It recently came to my attention that members of a Role with "Delete Own Attachments" permission cannot, in fact, delete their own attachments.

      Perhaps I'm foolish for having taken the name and description of this permission at face value for all of these years.

      Explanatory text I've discovered that "Only users with administrative privileges to remove an issue can remove attachments," makes no sense to me. Why would the ability to remove an attachment be dependent on permission to delete issues?

      I can understand why it might be desirable to prevent users who can delete issues from deleting arbitrary attachments (and this is likely the derivation of these permissions). But isn't it also equally reasonable that we might want to allow users to remove attachments without further allowing them to delete entire issues?

      I fail to see a rationale why these two permissions should be linked at all, much less why the one should be dependent on the other.

      Please decouple the Delete All/Own Attachments permissions from the Delete Issues permission.

      Attachments

        Activity

          People

            Unassigned Unassigned
            1f8012e72bdb Charles Albrecht
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: