Details
-
Bug
-
Resolution: Answered
-
Medium
-
42
-
Severity 2 - Major
-
1
-
Description
NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.
Summary
When a saved filter contains a project, which JQL has the project name or project key, and a user that don't have permission to view this project access this filter, the project name/key in the filter change to its database ID to all users accessing this filter. This breaks many functionalities that depend on this filter, like dashboard gadgets and also the the list of boards that appear under a project.
Steps to Reproduce
- Create a filter containing a project (or some projects), like project in (ABC, XYZ)
- Save this filter sharing it publicly
- Set another user to have permission to view projects ABC and XYZ
- With this user click Issues > View all filters and search by the saved filter on #2 and open it
- Set a third user not to have permission in one of the projects (ABC or XYZ)
- With this third user click Issues > View all filters and search by the saved filter on #2 and open it
- With the second user refresh the page showing the filter
Expected Results
The filter shouldn't change the project name/key to ID for the users that have permission to view all projects in the filter
Actual Results
The filter changes from project name/key to the project's database ID even for the users that have permission to view all projects in the filter
Notes
This does not update the database entries for the filters. Restarting the JIRA Application will refresh the filter data back to the project names, temporarily until the filter is accessed again by someone without permissions.
Workaround
Share the filter only with groups/users that have permission to view the projects in the filter
Attachments
Issue Links
- is related to
-
JRASERVER-62386 Saved filter corrupted when accessed by a user without permission to view all projects referenced in the filter
- Closed
- relates to
-
JRACLOUD-62419 Filters affected by JRA-62386 are breaking Pie Charts
- Closed
- mentioned in
-
Page Loading...