Users having browse permission in a project can integrate the whole jira project with a Slack channel

XMLWordPrintable

    • 2
    • Severity 3 - Minor
    • 1

      Issue Summary

      User having browse permission in a project and can integrate a project with a Slack channel.

      Steps to Reproduce

      1. Grant browse project permission for an user in a project.
      2. In a slack channel, the same user can type below command and the drop down list will show the project names where user has browse permission.
        /jira connect 
      1. User can select the project from the list and it will create an integration with the project.

      Expected Results

      The user having browse project permission should only have read only access for the project. They shouldn't have access modify/add slack integration for a jira project. This should be restricted to project admin/user having edit access.

      Actual Results

      The user just having browse permission can integrate a project with slack channel.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

            Assignee:
            Unassigned
            Reporter:
            Kamalesh Samal
            Votes:
            3 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: