Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-39771

Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Unresolved
    • None
    • Issue - View Issue
    • None
    • 0
    • 4
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission.

      Currently, user without any access to JIRA will still be suggested to be a watcher and only be prompted by a 'no permission' message when selected.

            [JRASERVER-39771] Users shouldn't be suggested on the watcher list if they don't have the 'Browse Project' permission

            Karel Bielan added a comment -

            Could you please give me an update regarding solving this issue? Thanks you very much! 

            Karel Bielan added a comment - Could you please give me an update regarding solving this issue? Thanks you very much! 

            ruckyp added a comment -

            Please send me more information about status of this task. Thank you.

            ruckyp added a comment - Please send me more information about status of this task. Thank you.

            ruckyp added a comment -

            Could you please give me an update regarding solving this issue? Thanks.

            ruckyp added a comment - Could you please give me an update regarding solving this issue? Thanks.

            ruckyp added a comment -

            This is a serious security issue. We can't enable "Browse users" permission for our clients, because it is not acceptable for them to be seen on any "suggested list" by other clients. With this permission disabled, our clients cannot mark other users not just in the wachers list, but also in comments. That is really uncomfortable. Please is there a date when this bug is going to be fixed? It is pretty important for us, thank you.

            ruckyp added a comment - This is a serious security issue. We can't enable "Browse users" permission for our clients, because it is not acceptable for them to be seen on any "suggested list" by other clients. With this permission disabled, our clients cannot mark other users not just in the wachers list, but also in comments. That is really uncomfortable. Please is there a date when this bug is going to be fixed? It is pretty important for us, thank you.

              Unassigned Unassigned
              vchin Vincent Chin (Inactive)
              Votes:
              15 Vote for this issue
              Watchers:
              15 Start watching this issue

                Created:
                Updated: