Details
-
Bug
-
Resolution: Fixed
-
High
-
None
-
1
-
Severity 2 - Major
-
Description
Summary
Users with no "Browse Projects" permission are being listed in the autocomplete list when being mentioned in comment through Jira mobile app
Steps to Reproduce
- Ensure user A does not have "Browse Projects" permission in the project ABC
- Login to the instance using Jira mobile application as a different user (user B). This user should have all the permissions to mention users (Browse users global permission, browse projects, etc.)
- Try to mention user A by typing username, a list of users with similar username will popup
Notes
- Although impermissible users can be mentioned in the issue, JIRA will not send email notification to those users
- Issues can't be assigned to the impermissible users (they won't be listed in issue's assignee field)
Expected Results
Only users with "Browse Projects" permission are being displayed in the autocomplete list
Actual Results
Users who are not granted with the "Browse Projects" permission are shown in the autocomplete list