Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-80763

Uploaded project avatars (custom) are not accessible anonymously as the system project avatars (default)

    XMLWordPrintable

Details

    • 1
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      Nowadays, if you upload a project avatar (custom) you can't view it anonymously (as it happens with default system avatars). This is important because if you export that information from Jira the Avatar URL will be exported but it won't be displayed in external systems because of the permissions restriction.

      You can replicate this by uploading a custom project avatar from the Project Settings configuration. Then you can get the project avatar URL from the browser and try to access them from Incognito mode:

      In my case, this system avatar is visible: https://amirafranco.atlassian.net/rest/api/2/universal_avatar/view/type/project/avatar/10415?size=small

      And this custom avatar is not visible: https://amirafranco.atlassian.net/rest/api/2/universal_avatar/view/type/project/avatar/10558?size=small

      As I'm getting the error:

      {"errorMessages":["You do not have permission to view the avatar."],"errors":{}} 

      Please note that the user profile avatars (including those uploaded by users) are accessible anonymously, unlike project custom avatars. This suggests that the restriction around visibility of custom project avatars may be unnecessary, because if this was due to privacy then surely user profile avatars should also be inaccessible anonymously as they would be deemed more private than project avatars.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              7372af706f9d Ariel
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: