Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-78762

When moving issue between projects, there is no check for permission to set issue security in destination project

    XMLWordPrintable

Details

    Description

      Issue Summary

      Symptom: When an issue that has issue security level set is being moved to an other project, after moving the issue "disappears", it will not be possible to view it.
      Reason: while moving the issue between projects there is no check for permission for the set issue security in destination project. The issue will have an issue security level that belongs to the source project, not available in the target project.

      Steps to Reproduce

      1. choose 2 projects that have different security scheme
      2. move an issue from one to the other

      Expected Results

      The issue should have a valid security level and should be visible after moving.

      Actual Results

      the issue cannot be accessed after moving

      https://hello.atlassian.net/wiki/spaces/~248273509/pages/757613043/Root+Cause+of+DOS+Escalation+JRACLOUD-74250

      The below exception is thrown in the xxxxxxx.log file:
      N/A, moving is actually successful

      Workaround

      Remove issue security level before moving the issue or enable the set issue security permission for the user in both projects (source and destination) in which user is trying to move the issues.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              c882ec8d68b7 Ankita Khandelwal (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: