-
Bug
-
Resolution: Timed out
-
Medium
-
None
-
4.1.2
-
4.01
-
Severity 2 - Major
-
-
This is a bit of an interesting workflow case we discovered today. If a user creates a workflow with 2 steps that are not editable (via the jira.issue.editable step property) and transitions between the two steps then in theory none of the fields should be editable, since they can't be edited in the source step and destination step.
If fields are added to the transition screen however they can happily be edited since the fields don't care about the source & destination workflow steps or if they are editable.
The CommentAssignIssueAction should probably check if both the source and destination workflow steps are editable and if both aren't then not show any fields on the transition screen. Similarly the validateTransition method in the issue service should do the same check and throw an error.
Note however that both the source & destination steps have to be not editable for this to be the case! If either the source or destination are editable, fields should still render and be editable (to allow users to assign when reopening/closing an issue for example).
This probably only affects a very small number of users who happened to configure their workflows this way.
- relates to
-
JRASERVER-32779 'jira.issue.editable = false' flag does not restrict editing issue links
-
- Gathering Impact
-