Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-38511

Anonymous users can’t browse the issues when they have Security Level granted to group Anyone

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.

      Steps to reproduce the issue:

      • Create a new project
      • Create a security scheme, with only one security level that allows Group (Anyone) to view the issues:
        •  
      • Associate the security scheme to the project created
      • Create two issues on the new project:
        • The first issue using the Security Level created
        • The second issue without using any Security Level (set it to none)
      • Edit the permission scheme associated with the project and add Group (Public) to Browse Projects permission
      • Log out of the instance.
      • Go to the issue navigator and search for the issues in that project.
      • You will only view the issue that is not using the security level.
      • If you try to access the issue that uses the security level directly by the specific URL, you will be able to view it. It is not shown only in the issue navigator (reindex doesn't help either)

      [*Update*]
      This also effects access to issues via the new issue view, if the issue security level is set and new issue view is the default The below error will be displayed:

      Workaround:

      • Set the Security Level to none

      Attachments

        1. Screenshot 2019-06-19 at 10.32.33.png
          30 kB
          Battlebeard
        2. Screen Shot 2021-01-11 at 1.56.46 pm.png
          54 kB
          Uchechi [Atlassian]

        Issue Links

          Activity

            People

              athimmappa@atlassian.com Adarsh Mysore Thimmappa
              hlechner HenriqueA
              Votes:
              19 Vote for this issue
              Watchers:
              38 Start watching this issue

              Dates

                Created:
                Updated: