Loading...

XML

Word

Printable

Details

Type: Suggestion
Resolution: Fixed
Fix Version/s: 9.11.0
Component/s: User Management - Others
Labels:

UIS:
9
Support reference count:
19
Current Status:

Hide

Atlassian Update – 30th June 2023

Thank you for reporting this issue. In the last weeks we have been working hard on fixing it.

Summary of the problem:
When adding watchers, the user-picker dialog should only show users who have access to the project.
New behaviour after the change:
Only users who have access to the project will show in watcher user-picker dialog.
Status of the fix and Fix Version:

The fix is ready, and we’re moving the status of this ticket to Waiting for release with Fix Version 9.11.

Best regards,
Konrad Plasota
Software Engineer

Show
Atlassian Update – 30th June 2023 Thank you for reporting this issue. In the last weeks we have been working hard on fixing it. Summary of the problem: When adding watchers, the user-picker dialog should only show users who have access to the project. New behaviour after the change: Only users who have access to the project will show in watcher user-picker dialog. Status of the fix and Fix Version: The fix is ready, and we’re moving the status of this ticket to Waiting for release with Fix Version 9.11 . Best regards, Konrad Plasota Software Engineer
Feedback Policy:

We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Description

NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

When adding watchers, the user-picker dialog should only show users who have access to the project.

We have multiple projects running on one JIRA installation, and users are generally not allowed on all projects.
Looking through lots of users is a bit painful, and security-wise it might also be bad.

Attachments

Issue Links

is duplicated by

JRASERVER-19814 Watchers can be added to a project without having rights in that project

Closed

JRASERVER-9291 Prefiltered User Picker

Closed

JRASERVER-14894 Manage Watchers shows users with no permission

Closed

JRASERVER-39771 Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission

Gathering Interest

is related to

JRASERVER-39682 "Assignee" and "reporter" pickers in issue search expose user data

Closed

JRASERVER-12264 Custom Field Type user (drop down list)

Closed

JRASERVER-36896 Limit User Picker to members of certain groups/roles in System Fields

Gathering Interest

JRASERVER-7467 Show only users with project access rights in Find Issues-User Browser

Future Consideration

SSE-527 Loading...

relates to

JRASERVER-9316 If a user is removed from all groups they are still being shown when viewing all users and filtering by the jira-users group

Closed

JRASERVER-27216 If you turn off "User Searching By Full Name" in "General Configuration" you can no longer add users via the Project Member Roles interface

Gathering Impact

JRACLOUD-7776 When adding watchers, the user-picker dialog should only show users who have access to the project.

Closed

JRACLOUD-40505 Assignable Watcher and Reporter permissions

Closed

JRASERVER-7663 Grant permissions to watchers

Closed

causes: PSR-623 Loading...

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(4 is related to, 5 relates to, 1 causes, 21 mentioned in)

Activity

People

Assignee:: Konrad Plasota

Reporter:: Jeppe Øland

Votes:: 329 Vote for this issue

Watchers:: 240 Start watching this issue

Dates

Created:: 26/Aug/2005 8:42 PM

Updated:: Yesterday 10:23 AM

Resolved:: Yesterday 10:23 AM