-
Bug
-
Resolution: Unresolved
-
Medium
-
None
-
7.2.3, Archived Jira Cloud, 8.5.0, 8.13.0, 8.20.0, 8.22.0, 9.0.0, 9.4.0, 9.12.0, 9.14.0
-
7.02
-
7
-
Severity 2 - Major
-
6
-
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.
Summary
Regardless of the users/group set in the Create Issue permission of the Project, an user with the "Modify Reporter" permission can set any user as Reporter of the case, even if that user can't create issues in the Project.
Expected Behavior
The user with the "Modify Reporter" permission should be able to select only users with the "Create Issue" permission.
Actual Behavior
The user with the "Modify Reporter" permission can set any user as Reporter of the issue.
- relates to
-
JRASERVER-63127 JIRA Service Desk Customers can be assigned to issues
- Gathering Impact
-
JRASERVER-63516 Assignable User Permission allows non-assignable users to be assigned when this permission is granted to the "Reporter" or "Current assignee"
- Gathering Impact
-
JRACLOUD-63213 User can add any user from JIRA as reporter
- Closed