-
Type:
Bug
-
Resolution: Won't Fix
-
Priority:
High
-
None
-
Affects Version/s: 4.4.3
-
Component/s: Issue - Time Tracking & Worklog
-
4.04
Currently I am able to delete an issue if I have the permission "Delete Issues", even if the issue has worklogs of other users assigned to it and I dont have the permission "Delete All Worklogs".
Due to this fact, an employee without corresponding permission is able to change the worked time of other employees, by deleting issues.
Therefore the delete issue function needs to respect the permission "Delete All Worklogs".