Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Unresolved
Priority: High
Fix Version/s: None
Affects Version/s: 6.1, 6.3.15, 6.4.12, 7.2.6, 7.2.7, 7.4.1, 7.7.1, 7.8.0, 7.9.0, 7.10.0, 7.11.0, 7.12.0, 7.13.0, 8.5.8
Component/s: Security
Labels:

Introduced in Version:
6.01
Support reference count:
64
Symptom Severity:
Severity 2 - Major
UIS:
49
Bug Fix Policy:
View Atlassian Server bug fix policy
Current Status:

Hide

Atlassian Update – 31 May 2023

Dear Customers,

Thank you for taking the time to file and comment on this issue. We realize it still occurs and impacts your organization. We are now working on multiple customer requests and on new features, so we have to postpone our resolution of this issue. We’ve decided to move this issue to our long-term backlog.

Please continue watching this ticket for future updates and changes in the timeline that impacts your work.

Best regards

Maciej Szarecki

Software Engineer

Show
Atlassian Update – 31 May 2023 Dear Customers, Thank you for taking the time to file and comment on this issue. We realize it still occurs and impacts your organization. We are now working on multiple customer requests and on new features, so we have to postpone our resolution of this issue. We’ve decided to move this issue to our long-term backlog. Please continue watching this ticket for future updates and changes in the timeline that impacts your work. Best regards Maciej Szarecki Software Engineer

Description

NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

If in your permission schema, you grant Browse Project permission to "User Custom Field Value", the project is visible to all users. Regardless of whether that field is filled or not.
JRA-31720 fixed that for the current assignee - i had hoped this would work for custom fields too.

Attachments

Issue Links

is duplicated by

JRASERVER-18812 "User Custom Field Value" permission type incorrectly exposes JIRA project names to everyone

Closed

is incorporated by

JRASERVER-38407 Permissions based on Customfields do not work in all cases

Closed

is related to

JRASERVER-37057 As an administrator, I would like to be able to grant permissions to browse projects and to browse issues independently

Gathering Interest

relates to

JRACLOUD-37117 Grant "Browse Project" permission to "User Custom Field Value" makes project visible to all users

Closed

JRASERVER-29840 User Picker field affecting the Browser Project permission

Gathering Impact

RM-20041 Loading...

PSR-198 Loading...

RAID-62 Loading...

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(3 relates to, 41 mentioned in)

Activity

People

Assignee:: Unassigned

Reporter:: Thomas Heidenreich (//S)

Votes:: 297 Vote for this issue

Watchers:: 208 Start watching this issue

Dates

Due:: 11/Mar/2021

Created:: 20/Feb/2014 12:35 PM

Updated:: 3 hours ago