Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-43395

Issue Assignee and Reporter is kept when moving an issue, even though user has no permission

      Summary

      Issue assignee and reporter is kept when issue is moved to another project, which in the new project, this current assignee and reporter has no permission (Assignable User, Create Issue)

      Environment

      JIRA 6.4.4

      Steps to Reproduce

      1. Create User A, B and U
      2. Create Project P and Q
      3. User A is in the Project Lead, Developer and default assignee roles for Project P
      4. User B is in the Project Lead, Developer and default assignee roles for Project Q
      5. User U is in the User role for Project P
      6. Have User U create an issue in Project P, so it will be assigned to User A automatically
      7. Have User A move the issue to Project Q

      Actual Results

      Issue is moved to Project Q successfully, without the need of changing the assignee or reporter of the issue

      Expected Results

      1. In the Move Issue action, enforce the need of changing the Reporter and/or Assignee to fit the configuration on the target project. OR
      2. Set the Assignee and Reporter field to the default role for that project

      Notes

      Need to update Moving an Issue documentation in JIRA, to reflect the correct expected behavior

            [JRASERVER-43395] Issue Assignee and Reporter is kept when moving an issue, even though user has no permission

            And suddenly, more than 6 years later, nothing happend. Problem still existing.

            Kay.Domschke added a comment - And suddenly, more than 6 years later, nothing happend. Problem still existing.

            And suddenly, more than 6 years later, nothing happend. Problem still existing.

            Kay.Domschke added a comment - And suddenly, more than 6 years later, nothing happend. Problem still existing.

            JM R. added a comment -

            Hello,

            This was marked as duplicate.

            However in the related issue JRA-39112 there is no mention of there being a problem with the reporter too (except for the comment that I made myself).

            Would you be so kind and update the description (and subject) of the related/duplicated issue.

            Thanks.

            JM R. added a comment - Hello, This was marked as duplicate. However in the related issue JRA-39112 there is no mention of there being a problem with the reporter too (except for the comment that I made myself). Would you be so kind and update the description (and subject) of the related/duplicated issue. Thanks.

            JM R. added a comment -

            Let me note that this is also a regression as at least checking for a suitable assignee still worked in Jira 5.2 that we had before the upgrade to Jira 6.

            JM R. added a comment - Let me note that this is also a regression as at least checking for a suitable assignee still worked in Jira 5.2 that we had before the upgrade to Jira 6.

            Ack tim.schlueter, I am raising the priority to Major as the issue has no known workaround at the moment.

            Regards,

            Oswaldo Hernández.
            JIRA Bugmaster.
            [Atlassian].

            Oswaldo Hernandez (Inactive) added a comment - Ack tim.schlueter , I am raising the priority to Major as the issue has no known workaround at the moment. Regards, Oswaldo Hernández. JIRA Bugmaster. [Atlassian] .

            Tim S. added a comment -

            Is it possible to raise the priority of this issue beacause it's Kind of a security issue.

            Tim S. added a comment - Is it possible to raise the priority of this issue beacause it's Kind of a security issue.

            JM R. added a comment -

            Let me just add that users do not necessarily have an intimate knowledge of Jira and therefore click where they can. If they don't get an error message, then it's ok for them. The software should protect against impossible scenarios.

            I have now written a few reporting scripts that point out these issues to me so I can counteract manually, but that is administrative overhead that need not be at all if someone had thought this through to the end.

            JM R. added a comment - Let me just add that users do not necessarily have an intimate knowledge of Jira and therefore click where they can. If they don't get an error message, then it's ok for them. The software should protect against impossible scenarios. I have now written a few reporting scripts that point out these issues to me so I can counteract manually, but that is administrative overhead that need not be at all if someone had thought this through to the end.

            JM R. added a comment -

            Allowing issues to be unassigned may not be enabled.

            JM R. added a comment - Allowing issues to be unassigned may not be enabled.

            Workaround : Before moving an issue to another project/issue type, always ensure to unassigned the assignee first.

            Azfar Masut (Inactive) added a comment - Workaround : Before moving an issue to another project/issue type, always ensure to unassigned the assignee first.

            JM R. added a comment - - edited

            Of course one should say that the system probably cannot set a "default reporter" as there is no such thing.
            It comes to the users of the projects to set the reporter correctly.
            However, you should not be able to move if the reporter has no permissions in the destination, that part is correct.

            I would consider a plain move a basic operation of the system, therefore I wonder: are there no unit tests testing these things? Is this really of minor priority?

            JM R. added a comment - - edited Of course one should say that the system probably cannot set a "default reporter" as there is no such thing. It comes to the users of the projects to set the reporter correctly. However, you should not be able to move if the reporter has no permissions in the destination, that part is correct. I would consider a plain move a basic operation of the system, therefore I wonder: are there no unit tests testing these things? Is this really of minor priority?

              Unassigned Unassigned
              dwatania@atlassian.com Daniel Watania (Inactive)
              Affected customers:
              3 This affects my team
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: