-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
High
-
Component/s: Permissions - Work Items and Space Authorisation
-
None
-
2
-
Severity 3 - Minor
-
1
-
Warranty
Issue Summary
When moving a ticket to an issue type that has no security level configured in its issue security scheme and no Security Level field on its screen, the existing security level from the source ticket is silently retained on the moved ticket.
Steps to Reproduce
- Create or have an existing ticket on Issue Type A with a security level set (e.g. "Internal Only")
- Ensure Issue Type B has no security scheme attached and no Security Level field on its screen
- Open the ticket → More → Move
- Select Issue Type B as the target and complete the move
Expected Results
Jira should either:
- Warn the user that the existing security level cannot be applied to the target issue type and will be removed, or
- Automatically clear the security level during the move, since the target issue type has no applicable configuration
Actual Results
The security level from the source ticket is silently carried over to the moved ticket, resulting in two problems:
- Broken permissions: The ticket retains a security level that does not match the target issue type's configuration, causing incorrect visibility and access restrictions
- Uneditable field: Because the Security Level field is not on the target screen, it renders as read-only when it contains a value. The user has no way to edit or clear it through the UI
Workaround
The security level can be cleared via the REST API:
{{PUT /rest/api/3/issue/{issueKey}
{ "fields":
}}}
Alternatively, temporarily adding the Security Level field to the target screen allows the field to be manually cleared through the UI.