Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Duplicate
Priority: Medium
Fix Version/s: None
Affects Version/s: 6.0.8
Component/s: Project Administration - Permissions
Labels:
- affects-server

Introduced in Version:
6
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

Adding "Current Assignee" to the Browse permission for a project lets any user of the system see that project (they can't necessarily view issues or create issues, but they can see the project).

Attachments

Issue Links

is cloned from

JRASERVER-8950 "Current Assignee" on Browse Permission creates security hole

Closed

Activity

People

Assignee:: MarkC

Reporter:: Thomas Heidenreich (//S)

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 10/Dec/2013 11:43 AM

Updated:: 28/Mar/2019 12:12 AM

Resolved:: 10/Dec/2013 12:04 PM

Time Tracking

Estimated:

Remaining:

Logged:

Not Specified