Summary

When accessing JIRA without logging in, Dashboard drop down button does not have Manage Dashboard link. But user is able to access <Base URL>/secure/ConfigurePortalPages.jspa?view=popular directly.

Steps to Reproduce

1. Access Manage Dashboard directly by using this URL; <Base URL>/secure/ConfigurePortalPages.jspa?view=popular.
2. User will be able to see Dashboards that are Public.

Expected Results

The user should be able to access the page from the UI (not by entering URL) to access all the Public dashboard.

Actual Results

The user needs to manually navigate to the URL to access this page.

Notes

This applies to <Base URL>/secure/ManageFilters.jspa?filterView=popular as well

Workaround

1. Shutdown JIRA
2. Edit the actions.xml located in the JIRA-INSTALL/atlassian-jira/WEB-INF/classes directory
3. Modify the file from:

       <action name="filter.ManageFilters" alias="ManageFilters">
           <view name="success">/secure/views/filter/managefilters.jsp</view>
           <view name="contentonly">/secure/views/filter/managefilters-content.jsp</view>
           <view name="securitybreach">/secure/views/securitybreach.jsp</view>
           <view name="error">/secure/views/filter/managefilters.jsp</view>
       </action>
   

   to:

       <action name="filter.ManageFilters" alias="ManageFilters" roles-required="use">
           <view name="success">/secure/views/filter/managefilters.jsp</view>
           <view name="contentonly">/secure/views/filter/managefilters-content.jsp</view>
           <view name="securitybreach">/secure/views/securitybreach.jsp</view>
           <view name="error">/secure/views/filter/managefilters.jsp</view>
       </action>
   

   Added the roles-required="use"

1. Restart JIRA
2. Repeat the steps for alias="ConfigurePortalPages">