-
Bug
-
Resolution: Duplicate
-
Low
-
None
-
1
-
Severity 3 - Minor
-
1
-
Issue Summary
Even if you have a private filter, you can still create a group subscription.
In that case all users that are part of the group will receive the emails, but since the filter is private (or at least they do not have access to) the name of the filter is replaced by the following in the email:
${searchRequest.getName()}
Steps to Reproduce
- Create a filter and make it private
- Create a group filter subscription adding a group that contain both you and other users
- Run the subscription
Expected Results
- There are some scenarios that could be considered:
- If user does not have access to that filter, should they receive the email?
- Could a group filter subscription also grant permission for that whole group?
- If the email is sent, couldn't it display the name of the filter then?
Actual Results
The email is sent, but the name of the filter is not displayed. Users cannot identify where that's coming from.
See a comparison between two users of the same group that was added to the subscription. One of them has access to the filter while the other one does not:
Workaround
None at the moment.
- duplicates
-
JRACLOUD-73440 Verify filter subscription recipient permissions
- Gathering Interest
- mentioned in
-
Page Loading...