Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-34914

Issue Navigator Accessible by anonymous users.

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a bug
    • Low
    • None
    • 6.0.6, 6.0.8
    • None

    Description

      Currently, even if the user is not logged into JIRA, he will still be able to access the Issue Navigator using the URL: http://localhost:PORT/issues/?jql=/.

      Even though there will be no issues shown in the Issue Navigator. However, it seems no proper to be able to view it.

      The expected behavior should redirect the user to the login page.

      Steps to reproduce:

      1. Setup JIRA instance (in this case I set-up 6.0.8)
      2. Try to go to the Issue Navigator URL (for example: http://localhost:8080/issue/?jql=)
      3. Even if you are not logged in, you will still be able to see the issue navigator.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-36544 JIRA search page does not redirect user to the login page

          • Low - Low priority issues
          • Closed
          is related to

          Suggestion - JRASERVER-40787 It should be possible to restrict access to the Issue Navigator by anonymous users

          • Gathering Interest
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-42626 Sensitive information displayed in anonymous REST API calls

          • Low - Low priority issues
          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              aalshargabi AlaA
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: