Details
-
Bug
-
Resolution: Duplicate
-
Medium
-
None
-
5.1.6, 5.2.11
-
None
-
5.01
-
Description
A user can still be assigned to an issue despite having no Assignable User permission in that project.
However, the criteria is that you must specify the Assignable User permission of the project's permission scheme to include the Reporter role.
Note that a user does not need to be the reporter, (in fact the user does not even need to be in any groups) to be assigned to issues in this project, as long as the Reporter role is added to the assignable user permission.
REPLICATION STEPS:
- Install a fresh new JIRA 5.2.11 instance.
- Create a new user, user_a. Remove all groups from this user.
- Create a new project.
- Modify the project's permission scheme to include the Reporter role into the Assignable User permission.
- Now create a new issue. In the "Assignee" field, type in the username user_a in full. Click on the Create button.
- Observe that the issue is created successfully, and the user is really assigned to the issue.
OTHER NOTES:
- Typing the username of the user into the Assignee field does not auto-complete, however clicking on "Assign" or "create issue" button will still successfully assign the user.
Attachments
Issue Links
- duplicates
-
JRASERVER-28987 Assignable user permission not respected if the permission is granted to reporters or current assignee
- Gathering Impact