-
Bug
-
Resolution: Unresolved
-
Medium
-
23
-
Severity 2 - Major
-
4
-
NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.
Steps to Reproduce:
1. Create a shared filter having similar JQL:
project in (PROJECT1, PROJECT2) ORDER BY created DESC
2. Login as a user having only browse permission for "PROJECT2".
3. View the filter in issue navigator.
4. It shows user the number of issues allowed to see. Add a "filter results" gadget on the dashboard.
5. Select the filter.
Result:
The user gets error message "The selected filter filter-<ID> has an error: A value with ID '<ID>' does not exist for the field 'project'..
Expected:
Here also user should be able to view issues from project having browse permission.
Update
The same happens when issue keys are specified in the filter query, but then the issues have a security level whose the login user does not have permissions on. In that case the issue key will be replaced by the issue ID in the search when opening the results, which breaks the search:
Issue does not exist or you do not have permission to see it.
Notes
Attempting to access the XML view of a filter with this configuration will result in a HTTP 400 with an error similar to "HTTP Status 400 - A value with ID '10000' does not exist for the field 'project'." as per the attached image.
- is blocked by
-
JRACLOUD-40245 Allow JQL searches via the Issue Navigator to skip validation and return partial results
- Gathering Interest
- is duplicated by
-
JRACLOUD-78958 Specifying the key of an issue that has a security level applied in the filter query might break the results
-
- Closed
-
- is related to
-
JRASERVER-20916 Shared filter queries don't work with "Filter Result" gadget if login user doesn't have browse permission on one of the projects.
-
- Gathering Impact
-
- relates to
-
JRACLOUD-84194 Show more meaningful error message when gadget fails to load due to lack of project access
- Gathering Interest
- is resolved by
-
JDAG-1284 Failed to load
Form Name |
---|
Hey when is this going to be fixed? the above change has been very detrimental to my organization. this is causing us to have to create hundreds of duplicate filters and dashboards to support individual projects. This is another example of Atlassian making changes without viewing how their users are utilizing the software.
https://community.developer.atlassian.com/t/jql-queries-containing-issuekey-or-issue-will-have-the-error-messages-and-response-code-changed/48242 - this "fix" is actually not a fix! users could already not see the full key if they didn't have access to the other project. so the fix was not thought through, and not understood what the ramifications would be and closed out for comments less than a month after creation and change. while there are request to have it fixed that are much older. Please Jira FIX this! please remove the change!