Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-63994

The rest documentation around certain user resources is incorrect with respect to anonymous access and the "Browser User" permission

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.

      The JIRA cloud and server rest documentation both state in certain rest resources that they cannot be accessed anonymously. However, when "Anyone" is granted the "Browser User" permission anonymous users can use some rest resources for which the documentation states that they are not permitted access.

      The following rest resources have this documentation issue:

      1. https://docs.atlassian.com/jira/REST/cloud/#api/2/groupuserpicker-findUsersAndGroups / https://docs.atlassian.com/jira/REST/server/#api/2/groupuserpicker-findUsersAndGroups 

      2. https://docs.atlassian.com/jira/REST/cloud/#api/2/user-findUsersForPicker / https://docs.atlassian.com/jira/REST/server/#api/2/user-findUsersForPicker 

      3. https://docs.atlassian.com/jira/REST/cloud/#api/2/user-findUsers /  https://docs.atlassian.com/jira/REST/server/#api/2/user-findUsers 

      4. https://docs.atlassian.com/jira/REST/cloud/#api/2/user-findUsersWithBrowsePermission / https://docs.atlassian.com/jira/REST/server/#api/2/user-findUsersWithBrowsePermission 

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-63994 The rest documentation around certain user resources is incorrect with respect to anonymous access and the "Browser User" permission

          • Low - Low priority issues
          • Closed
          relates to

          Suggestion - JRACLOUD-18076 Warn about assigning "Anyone" group in Global and Project permissions

          • Closed

          Activity

            People

              Unassigned Unassigned
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: