Details
-
Bug
-
Resolution: Timed out
-
Low
-
6.2.3
-
6.02
-
Severity 3 - Minor
-
-
Description
If a user is deactivated, which means it belongs to no existing group in JIRA, it is still able to be set as an issue watcher if it has the Browser Project Permission.
Steps to replicate:
- deactivate an user.
- ensure it has Browse Project permission.
- try to add it as watcher in any existing issue on the project it has the permission to browse.
The issue has been addressed in JRA-27453, but is not solved in JIRA v6.2.3#6260
Attachments
Issue Links
- is cloned from
-
JRASERVER-27453 Deactivated user is allowed to be added as watcher
- Closed