Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-65821

An issue can be linked to by ID even if link and browse permissions are absent

    XMLWordPrintable

Details

    Description

      Problem Definition:

      If you remove the Link Issues Permission and Browse Projects Permission a user can still create a link if they use the issue key.

      Steps to Reproduce

      1. Create a Project Role and remove the "Browse Projects" and "Link Issues" permissions from that role in a target-project.
      2. Create a link using the Issue ID

      This will prevent a user from seeing the link on the main issue page, however, the link still shows as being created in the Activity Tab.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              bmcelveen Branden McElveen (Inactive)
              Votes:
              9 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated: