Mention notifications do not respect the "Viewable by" security level restriction set on a comment

XMLWordPrintable

    • 5
    • Severity 2 - Major
    • 1

      NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.

      Reproduction Steps

      1. Add a comment to a JIRA issue
      2. Set the comment security level to be restricted to the "Administrators" role
      3. In the comment content, mention users who only have "Users" role
      4. Submit the comment
      5. Bug The comment content will be sent via an email mentions notification to the mentioned users.

      JIRA should not send mention notifications to users who do not match the security level set for the comment.

        1. Comment2.png
          9 kB
          Janet Albion
        2. comment1.png
          14 kB
          Janet Albion
        3. Users.png
          22 kB
          Janet Albion
        4. Notification.png
          12 kB
          Janet Albion

            Assignee:
            raymo
            Reporter:
            Septa Cahyadiputra (Inactive)
            Votes:
            22 Vote for this issue
            Watchers:
            28 Start watching this issue

              Created:
              Updated:
              Resolved: