-
Bug
-
Resolution: Unresolved
-
Medium
-
None
-
4.1.2, 5.1.8, 6.1.7, 6.2.7
-
4.01
-
7
-
Severity 2 - Major
-
5
-
Steps to Reproduce:
1. Create a shared filter having similar JQL:
project in (PROJECT1, PROJECT2)
2. Execute the shared filter with a user that does not have browse permissions for project PROJECT1 (he/she can be the owner of the filter). The resulting JQL becomes:
Expected Results:
The filter would run normally, returning only issues in which the user running it has the necessary permissions - in this case, it would return all issues from PROJECT2.
Actual Results:
The filter becomes:
project in (10020, PROJECT2)
- The non-viewable projects ID is replaced with numeric ID.
- The filter initially displays the results, but once switching to Edit no results return with the displayed error message:
A value with ID '10020' does not exist for the field 'project'.
- If the filter is used in a gadget, the gadget displays the message below and doesn't display any results:
The selected filter filter-10100 has an error: A value with ID '10100' does not exist for the field 'project'..
- is a regression of
-
JRASERVER-20578 Shared filter queries break when users don't have browse permissions for projects in the search query
- Closed