Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-28173

Users who do not have permission to access Confluence are able to see Confluence's status update on JIRA Activity Stream

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a bug
    • Medium
    • None
    • None
    • None

    Description

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      It seems that JIRA users who do not have permission to access Confluence can still see the status updates of Confluence users.

      Steps to replicate (per-requisite: Set up JIRA and Confluence application link):

      1. Set up Confluence to use JIRA user base
      2. Create a user that does not have access to Confluence. In other words, users can only access JIRA. For example JIRAuser
      3. A user in Confluence updates his/her status
      4. Login to JIRA as a user who does not have permission to Confluence. This user is still able to see the status updates of Confluence Users from JIRA Activity Stream.

      Attachments

        Issue Links

          Activity

            People

              jpendleton Justus Pendleton (Inactive)
              isiagian Immanuel Siagian (Inactive)
              Votes:
              5 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: