-
Bug
-
Resolution: Unresolved
-
Low (View bug fix roadmap)
-
None
-
7.6.4, 7.13.0
-
None
-
7.06
-
2
-
Severity 3 - Minor
-
Summary
As per JRASERVER-61246, a user can create a link from an issue of a project he has viewing and linking permissions to another issue in a project he does not have viewing and linking permissions. Then, he won't be able to delete that link he created himself because he does not have permission to view the other ticket.
The issue link appear under a Non-Authorized Links section, and the issue key is visible but it's title says You are not authorized to view this issue. The user cannot delete the link he created himself.
Expected behaviour
As per JRASERVER-61246, the user either should not be able to create the link, or at least be able to delete it after creating it.
Current behaviour
User cannot delete the link himself. It needs someone with permissions on both projects to delete it.
Workaround
The Jira Administrator should have rights to delete the link if needed.
- is caused by
-
JRASERVER-61246 I can create issue links to projects for which I do not have Link Issues permissions
-
- Gathering Impact
-
This is oddly inconsistent