Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-26659

Group Custom Field Value in the "Create Issue" project permission allows any user to create issues on a given project

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a bug
    • Low
    • None
    • 4.2.4
    • None

    Description

      When using the Group Custom Field Value on the "Create Issue" project permission, any user in JIRA is able to create issues on the project.

      Steps to reproduce:

      • Create a Group Picker custom field (Global Context) (Administration> Issue Fields > Custom Fields) - let's say Test Group Picket Custom Field
        • OPTIONAL Set a default value for the custom field
      • Go to the Default permission scheme and Add to the "Create Issue" Permission the option Group Custom Field Value
      • Go to the Default permission scheme and Add to the "Create Issue" Permission the option Group and choose group jira-administrators
      • Create a user and add it only to the jira-users group.
      • Create a project and associate it to the Default permission scheme
      • Log in JIRA with the user you just created
      • The user will be able to create issues on the project you just created project.
        • If you remove the Group Custom Field Value from the "Create Issue" permission, the user is no longer able to create issues on the project.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              cgauterio Clarissa Gauterio (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: