Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-73061

JQL Search results using sprint name are incorrect for a Non-Admin user when the user doesn't have access to the board or when it cannot be checked if user has access to the board

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • High
    • 8.20.9, 9.1.0
    • 8.13.9, 8.20.1, 8.22.2
    • JQL
    • 8.13
    • 16
    • Severity 2 - Major
    • 41
    • Hide
      Atlassian Update – 01 May 2023

      Dear Customers,

      We're happy to announce that this issue has been already fixed in the 8.20.9 and 9.1.0 releases as part of JRASERVER-73763.

      With this update, JQL search queries that use sprint names will now return accurate results.

      Best regards,
      Sławomir Zaraziński
      Jira DC Engineer

      Show
      Atlassian Update – 01 May 2023 Dear Customers, We're happy to announce that this issue has been already fixed in the 8.20.9 and 9.1.0 releases as part of JRASERVER-73763 . With this update, JQL search queries that use sprint names will now return accurate results. Best regards, Sławomir Zaraziński Jira DC Engineer

    Description

      Issue Summary

      JQL Search results using sprint name are incorrect for a Non-Admin user when the user doesn't have access to the board or when it cannot be checked if the user has access to the board (Example: board associated with sprint was deleted)

      Steps to Reproduce

      1. Create a Scrum Software Project "Test Sprint" with scrum board "TS board"
      2. Create 20 issues in the backlog on the board.
      3. Create a Sprint with the name ISRA42 on the board and move 5-6 issues in this sprint.
      4. Now create two more sprints with name "SAS ServiceOps Bugs", "SAS Support Bugs" on the same board and move remaining issues in these sprints
      5. Go to the User Management section and create a group "ABCD"
      6. Create two users sp1 and sp2 with jira-software-users groups so they can access Jira.
      7. Now, also Add group ABCD to the User sp2
      8. Go back to the board "TS board" and configure it to share the associated Filter view permission with the only group "ABCD" 
      9. Next, start the sprint ISRA42, close some of the issues under it and complete this sprint.
      10. Now, run the below JQL search with user sp1, sp2, and one of the global admin users. 
        sprint in ("SAS ServiceOps Bugs", "SAS Support Bugs")

      Expected Results

      All three users should be able to see issues under these sprints.

      Actual Results

      Global Admin and user sp2 see the correct results while the user sp1 sees incorrect results and even gets issues of the sprint ISRA42 in the JQL search result.
      Below is the search result for user sp1

      Note: If we delete the board "TS Board", then even user sp2 having access to group ABCD will start getting incorrect results as it cannot be determined now, if the user has access to the board's filter Global admin can still see the correct results.

      Workaround

      Run the JQL search using sprint ID.

      Check the sprint ID from the table AO_60DB71_SPRINT

      jira8139=# select "ID","NAME" from "AO_60DB71_SPRINT" ;
       ID |        NAME         
      ----+---------------------
        2 | SAS ServiceOps Bugs
        3 | SAS Support Bugs
        1 | ISRA42
      (3 rows) 

      and run the JQL search using it

      sprint in (2,3) 

      Workaround

      This workaround was tested and worked for Jira 8.19.3

      1. Select the correct Board ID that the Sprint should appear with the query below:
        SELECT "ID", "NAME" FROM "AO_60DB71_RAPIDVIEW" WHERE "NAME" = 'NameOfTheBoard';
      2. Select the correct Sprint ID of the Sprint that should be updated:
        SELECT "ID", "NAME" FROM "AO_60DB71_SPRINT" WHERE "NAME" = 'NameOfTheSprint';
      3. Perform the update of the Board ID in the Sprint table:
        UPDATE "AO_60DB71_SPRINT" SET "RAPID_VIEW_ID" = 'IDOfTheBoardYouWant' WHERE "ID" = 'SprintIDOfTheBoardThatYouWant';
      4. Perform a Full Reindex;
      5. Move the issue up or Down in the Sprint Menu as the image below:

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              735265c464b9 Sandeep Goyal (Inactive)
              Votes:
              15 Vote for this issue
              Watchers:
              25 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: