Details
-
Bug
-
Resolution: Won't Fix
-
Low
-
None
-
7.3.0, 7.3.2
-
7.03
-
1
-
Severity 3 - Minor
-
0
-
Description
Summary
When using an Issue Collector, users without the Create Attachment permission can still attach files.
Steps to Reproduce
- Setup an Issue Collector using the Got feedback? template
- Confirm the Project Permissions do not grant Create Attachment to anybody.
- Use the issue collector to submit an issue with an attachment.
Expected Results
Creation would fail, or, if not fail at least not attach the file.
Actual Results
New Issue is created with an attachment.
Notes
Happens both when using default reporter or when trying to match user session.
Workaround
Use the Custom template instead and omit the Attachment field.
If trying to reproduce the 'got feedback' emoji ratings input, you can roughly approximate this by defining a Custom Field to use instead.