Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-22532

Activity Stream shows linking to issues that the user doesn't have access to

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Medium
    • 4.4
    • 4.1.2
    • Issue - View Issue
    • I noticed this in our 4.1.2 standalone version of JIRA. We are using Java 1.6.0_12 and Windows server 2003 for small business, service pack 2.

    Description

      We have two groups of users, and two permission schemes with different groupings of projects. A User in group A can only view projects with Permission Scheme A. A user in Group B can only view projects with Permission Scheme B.

      If I (belonging to both permission schemes) link an issue in a project from Permission Scheme A (we'll call this projectA), to an issue in a project assigned to Permission Scheme B (we'll call this project B), a user solely in one of those permission schemes does not see the link on the View Issue page. However, they do see a note saying "Bridget M changed the Link to 'This issue depends on PROJECTB-14' on PROJECTA-157 (Create Bug Lookup Tool)" in their activity stream. I would imagine that because they can't see it on the issue face, they shouldn't see it in the activity stream either.

      Also, I want to bring up, for the (JRA-2364) issue, this is one of the areas that shows time tracking information still, despite the hack. If I knew how to block the time tracking stuff, I could hack our source files again to accommodate the time tracking changes.

      Attachments

        Activity

          People

            Unassigned Unassigned
            4aaf48e08d9f Bridget M
            Votes:
            2 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: