Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-62386

Saved filter corrupted when accessed by a user without permission to view all projects referenced in the filter

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      Summary

      When a saved filter contains a project, which JQL has the project name or project key, and a user that don't have permission to view this project access this filter, the project name/key in the filter change to its database ID to all users accessing this filter. This breaks many functionalities that depend on this filter, like dashboard gadgets and also the the list of boards that appear under a project.

      Steps to Reproduce

      1. Create a filter containing a project (or some projects), like project in (ABC, XYZ)
      2. Save this filter sharing it publicly
      3. Set another user to have permission to view projects ABC and XYZ
      4. With this user click Issues > View all filters and search by the saved filter on #2 and open it
      5. Set a third user not to have permission in one of the projects (ABC or XYZ)
      6. With this third user click Issues > View all filters and search by the saved filter on #2 and open it
      7. With the second user refresh the page showing the filter

      Expected Results

      The filter shouldn't change the project name/key to ID for the users that have permission to view all projects in the filter

      Actual Results

      The filter changes from project name/key to the project's database ID even for the users that have permission to view all projects in the filter

      Notes

      This does not update the database entries for the filters. Restarting the JIRA Application will refresh the filter data back to the project names, temporarily until the filter is accessed again by someone without permissions.

      Workarounds

      • Favorite/unfavorite the affected filter. This will flush the caches and the filter will be reloaded correctly.
      • Share the filter only with groups/users that have permission to view the projects in the filter

      Attachments

        Issue Links

          Activity

            People

              nwroblewska Natalia Wroblewska
              fwillig Felipevsw (Inactive)
              Votes:
              81 Vote for this issue
              Watchers:
              87 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: