Uploaded image for project: 'Jira Platform Cloud'
  1. Jira Platform Cloud
  2. JRACLOUD-83531

Adding an issue to an epic silently fails if the user doesn't have Edit Issues permission for both the epic and the child issue

XMLWordPrintable

      When adding an issue to an epic (via the "Epic Link" custom field), the user needs edit permission for both the issue that's being added into the epic and the epic itself. If they lack edit permission for the epic, JIRA Software will still allow selecting of the epic for the child issue but after clicking Save the Epic Link doesn't show on the child issue and there's no indication as to why this has occurred.

      Steps to reproduce

      1. Create two projects A and B, and a user who has Edit Issues permission only for A but can otherwise view B.
      2. Create an epic in B and a regular issue in A.
      3. Edit the issue in A by making a HTTP PUT call to /rest/api/2/issue/ with body 
      { "fields": { "customfield_{epicLinkFieldId}": "{epicKey}" }}
      

       

      Expected results

      The user receives an error code and message indicating that they don't have permission to add the issue to the Epic in B.

      Actual results

      The request returns 200 OK but the issue in A isn't added to the epic in B with no indication of why.

              sstrzelka@atlassian.com Szymon Strzelka
              nmason Nick Mason
              Votes:
              29 Vote for this issue
              Watchers:
              49 Start watching this issue

                Created:
                Updated:
                Resolved: