Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-26659

Group Custom Field Value in the "Create Issue" project permission allows any user to create issues on a given project

      When using the Group Custom Field Value on the "Create Issue" project permission, any user in JIRA is able to create issues on the project.

      Steps to reproduce:

      • Create a Group Picker custom field (Global Context) (Administration> Issue Fields > Custom Fields) - let's say Test Group Picket Custom Field
        • OPTIONAL Set a default value for the custom field
      • Go to the Default permission scheme and Add to the "Create Issue" Permission the option Group Custom Field Value
      • Go to the Default permission scheme and Add to the "Create Issue" Permission the option Group and choose group jira-administrators
      • Create a user and add it only to the jira-users group.
      • Create a project and associate it to the Default permission scheme
      • Log in JIRA with the user you just created
      • The user will be able to create issues on the project you just created project.
        • If you remove the Group Custom Field Value from the "Create Issue" permission, the user is no longer able to create issues on the project.

            [JRASERVER-26659] Group Custom Field Value in the "Create Issue" project permission allows any user to create issues on a given project

            No work has yet been logged on this issue.

              Unassigned Unassigned
              cgauterio Clarissa Gauterio (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: