-
Type:
Bug
-
Resolution: Not a bug
-
Priority:
High
-
Component/s: Navigation - Your work
-
None
-
1
-
Severity 2 - Major
Issue Summary
In the "Your work" page under the "Worked on tab", users can still see the issues they've worked on previously although they don't have access to it.
Steps to Reproduce
- Add a user to a group A
- Grant group A to view project A
- Get the user to create a test issue, comment on issue edit to fill in the "Worked on" page
- Remove the user from group A
- Try to access project A, you won't be able to.
- But when the user visits "Your work" page, under the "Worked on" tab, the user can still see the issue summary
Expected Results
Users should not be able to see any information regarding issues for projects they do not have access to.
Actual Results
Users can actually see the Issue summary, issue type. etc
But they cannot access it if they click on the issue
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available