Uploaded image for project: 'Jira Platform Cloud'
  1. Jira Platform Cloud
  2. JRACLOUD-39771

Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission

XMLWordPrintable

    • 0
    • 6

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.

      Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission.

      Currently, user without any access to JIRA will still be suggested to be a watcher and only be prompted by a 'no permission' message when selected.

        1. screenshot-1.png
          screenshot-1.png
          69 kB
        2. screenshot-2.png
          screenshot-2.png
          71 kB

            [JRACLOUD-39771] Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission

            Anusha Rutnam added a comment -
            Atlassian Update - January 2023

            As I have not received any responses to this comment I am closing this ticket.

            If you disagree with the closing of this ticket, please add a comment here saying why and we can reopen it.

            Anusha Rutnam added a comment - Atlassian Update - January 2023 As I have not received any responses to this comment I am closing this ticket. If you disagree with the closing of this ticket, please add a comment here saying why and we can reopen it.

            Anusha Rutnam added a comment -

            Just cross-posting this message from what I believe is a duplicate feature request:

            In a company-managed software project, only users with the Browse Projects project permission will appear in the Watchers dropdown.

            In the following example, Morty does have the Browse Projects project permission:

            And this is how it appears when I remove Morty's Browse Projects project permission:

             
            Could the watchers of this issue provide steps to reproduce - does this request perhaps only refer to certain project types?

            Anusha Rutnam added a comment - Just cross-posting this message from what I believe is a duplicate feature request : In a company-managed software project, only users with the Browse Projects project permission will appear in the Watchers dropdown. In the following example, Morty does have the Browse Projects project permission: And this is how it appears when I remove Morty's Browse Projects project permission:   Could the watchers of this issue provide steps to reproduce - does this request perhaps only refer to certain project types?

            Yatish Madhav added a comment -

            +1 - yeah this is something that would be nice to keep configured. Thank you

            Yatish Madhav added a comment - +1 - yeah this is something that would be nice to keep configured. Thank you

            MichaelX added a comment -

            I'm a little surprised there's been no activity or feedback from Atlassian on this issue. It seems like a major security issue. We'd like to run multiple Service Desk projects for different clients. And the clients should be fully isolated from each other - no visibility into users from other companies, etc. This bug makes that impossible. Is there a workaround that I'm missing?

            MichaelX added a comment - I'm a little surprised there's been no activity or feedback from Atlassian on this issue. It seems like a major security issue. We'd like to run multiple Service Desk projects for different clients. And the clients should be fully isolated from each other - no visibility into users from other companies, etc. This bug makes that impossible. Is there a workaround that I'm missing?

              Unassigned Unassigned
              vchin Vincent Chin (Inactive)
              Votes:
              10 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: