Details
-
Bug
-
Resolution: Not a bug
-
Medium
-
None
-
None
-
None
Description
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.
It seems that JIRA users who do not have permission to access Confluence can still see the status updates of Confluence users.
Steps to replicate (per-requisite: Set up JIRA and Confluence application link):
- Set up Confluence to use JIRA user base
- Create a user that does not have access to Confluence. In other words, users can only access JIRA. For example JIRAuser
- A user in Confluence updates his/her status
- Login to JIRA as a user who does not have permission to Confluence. This user is still able to see the status updates of Confluence Users from JIRA Activity Stream.
Attachments
Issue Links
- is related to
-
JRASERVER-27921 Users who do not have the View Version Control permission are able to see commits on the Activity Stream
- Closed
- relates to
-
JRACLOUD-28173 Users who do not have permission to access Confluence are able to see Confluence's status update on JIRA Activity Stream
- Closed
- was cloned as
-
CONFSERVER-25790 Users who do not have permission to access Confluence are able to see Confluence's status update on JIRA Activity Stream
- Closed