Details
-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
7.4.2, 7.5.0-EAP01
-
7.04
-
4
-
Severity 3 - Minor
-
4
-
Description
Problem Definition:
If you remove the Link Issues Permission and Browse Projects Permission a user can still create a link if they use the issue key.
Steps to Reproduce
- Create a Project Role and remove the "Browse Projects" and "Link Issues" permissions from that role in a target-project.
- Create a link using the Issue ID
This will prevent a user from seeing the link on the main issue page, however, the link still shows as being created in the Activity Tab.
Attachments
Issue Links
- duplicates
-
JRASERVER-31248 Cannot restrict an issue linking using a permission scheme
- Gathering Impact