-
Bug
-
Resolution: Not a bug
-
Low
-
None
-
6.0.6, 6.0.8
-
None
-
6
-
Currently, even if the user is not logged into JIRA, he will still be able to access the Issue Navigator using the URL: http://localhost:PORT/issues/?jql=/.
Even though there will be no issues shown in the Issue Navigator. However, it seems no proper to be able to view it.
The expected behavior should redirect the user to the login page.
Steps to reproduce:
- Setup JIRA instance (in this case I set-up 6.0.8)
- Try to go to the Issue Navigator URL (for example: http://localhost:8080/issue/?jql=)
- Even if you are not logged in, you will still be able to see the issue navigator.
- is duplicated by
-
JRASERVER-36544 JIRA search page does not redirect user to the login page
- Closed
- is related to
-
JRASERVER-40787 It should be possible to restrict access to the Issue Navigator by anonymous users
- Gathering Interest
- relates to
-
JRASERVER-42626 Sensitive information displayed in anonymous REST API calls
- Closed
- mentioned in
-
Page Loading...