Sub-tasks "bulk operation" doesn't check for permission and throws 404 error (when unpermitted)

XMLWordPrintable

    • Severity 3 - Minor

      Summary

      The "Bulk Operation" button shown in the 'sub-tasks' session from a parent issue is shown for users who don't have the permission, and it throws a 404 page when trying to perform the bulk

      Environment

      • Tested within Jira Cloud

      Steps to Reproduce:

      1. Remove the "make bulk changes" permission from your user
      2. On an issue with sub-tasks, try to perform any "bulk operation" within the sub-tasks panel (steps outlined in the video)

      Expected Results

      • The "bulk operation" button isn't shown if the user has no permissions to do it

      Actual Results

      The button is displayed and a 404 is thrown when trying to perform the operation

      Notes

      To see this happening check this video -> https://screencast-o-matic.com/watch/cFXlqBrVHe

      Workaround

      None at the moment, if this is happening to someone that should be able to do it, make sure to provide the global permission "make bulk changes"

            Assignee:
            Unassigned
            Reporter:
            Eduardo Masiero
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: