-
Suggestion
-
Resolution: Unresolved
-
881
-
144
-
I know this sounds like a duplicate of JRA-7659, but that one is about the perfect generic solution to the user picker problem.
This issue here is about a basic (small) but necessary improvement: don't show users who don't have access to Jira or have the ability to filter these accounts out.
Most people will benefit from it, since almost any jira instance will have some old users accounts floating around, which have no access to the instance anymore (because they left the company, or...). It is even possible to select Portal Only customer as a reporter and project roles for non-Jira Service Desk issues.
Steps to replicate
Scenario 1
- Invite User as a Portal Only customer
- Go to Project Settings
- Click on People and add People.
- Type a Portal only customer and add any roles.
- "GG" audit Log
Scenario 2
- Invite User to your instance (and revoke access to Jira) or as a Portal Only customer
- Create an issue
- Select the User who doesn't have Jira access or Portal Only customer as the reporter
Expected
- User who doesn't have Jira access or Portal Only customer isn't visible through the reporter/user picker list
- User who doesn't have Jira access or Portal Only customer can't be assign to Project Roles
Actual Result
- User who doesn't have Jira access or Portal Only customer can be added on Project Roles
- They can also be assigned to any Roles
- Audit Log show the portal only customers ID Starting with "qm:..."
- User who doesn't have Jira access or Portal Only customer able to be selected as the reporter (even for non-Jira Service Desk issues)
Suggestion
Hide or Filter out the Portal Only Customer/User without access from appearing on projects where they shouldn't be.
- duplicates
-
JRACLOUD-84770 Please implement a solution that filters out portal only accounts from being added to Jira projects
- Closed
- is duplicated by
-
JSDCLOUD-8649 Customer without permission to project can be added as a reporter of a request
- Closed
-
JRACLOUD-60427 Remove ability to add portal user as reporter
- Closed
-
JSWCLOUD-21368 Don't allow Portal Only Customers who don't have Jira application access to appear as option in Board Admins list
- Closed
- is incorporated by
-
ID-8128 Limit User Picker to members of certain groups/roles in System Fields in Jira Software, Jira Work Management, JIRA Service Management and Atlas
- Gathering Interest
- is related to
-
JRACLOUD-70198 Assignable user list returns users with no application access
- Closed
-
JSDCLOUD-8649 Customer without permission to project can be added as a reporter of a request
- Closed
-
JRASERVER-23902 Don't show users in user picker which are *not* in jira-users group
- Needs Triage
-
JRACLOUD-40963 Allow user filtering for User Picker (multiple users) custom field type
- In Progress
-
JRACLOUD-42446 Restrict Reporter Field to only users with Create Issues Permission
- Closed
-
JSWCLOUD-21368 Don't allow Portal Only Customers who don't have Jira application access to appear as option in Board Admins list
- Closed
-
ID-8128 Limit User Picker to members of certain groups/roles in System Fields in Jira Software, Jira Work Management, JIRA Service Management and Atlas
- Gathering Interest
-
ACE-2968 Loading...
-
ACE-3999 Loading...
- relates to
-
JRACLOUD-80908 Users who does not have access to the product is available under user picker fields like reporter, watcher
- Closed
-
JRACLOUD-76780 Customers shouldn't be suggested on User Picker custom fields on non-Jira Service Management projects
- Closed
-
TRUSTHELP-3238 Loading...
- blocks
-
ACE-3992 Loading...
- is addressed by
-
ENT-1690 Loading...
- mentioned in
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...