Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-28173

Users who do not have permission to access Confluence are able to see Confluence's status update on JIRA Activity Stream

XMLWordPrintable

      NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.

      It seems that JIRA users who do not have permission to access Confluence can still see the status updates of Confluence users.

      Steps to replicate (per-requisite: Set up JIRA and Confluence application link):

      1. Set up Confluence to use JIRA user base
      2. Create a user that does not have access to Confluence. In other words, users can only access JIRA. For example JIRAuser
      3. A user in Confluence updates his/her status
      4. Login to JIRA as a user who does not have permission to Confluence. This user is still able to see the status updates of Confluence Users from JIRA Activity Stream.

            jpendleton Justus Pendleton (Inactive)
            isiagian Immanuel Siagian (Inactive)
            Votes:
            5 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: