summary

After logging in without the JIRA Users permission or no Application Access, a login redirect loop occurs.

steps to reproduce

1. set a user account to either have no JIRA Users permission, or no Application Access;
2. go to an OnDemand instance and log in with these credentials.

Expected result: a warning about missing permissions is displayed.

Actual result: System Dashboard is displayed, with the Log In button in top right corner. Clicking it only refreshes the page, it's impossible to log out and only after clearing the browser cache the login page can be accessed again.

See the attached video to see this behaviour in a publicly accessible agile board.