Issue Summary

In the comment section of an issue, the user can choose to mention other users who have been restricted by the security level of the project.

The Expected results are showing in the older version of Jira (Ex: v8.13.20), however, the behavior is somehow broken in the newer versions of Jira.

This is reproducible on Data Center: Yes

Steps to Reproduce

• Install a Jira Server or Data Center of v8.20.x.
• Add Project Roles- Administrators, Developers, Users.
• Create Users- Admin, User1, User2.
• Create a Project with:
      - Issue Security Scheme with Levels: Project (for roles Administrators, Developers) and Public (for roles Administrators, Developers, Users).
      - Permission Scheme where Browse Project is assigned to roles Administrators, Developers, Users.
• Add users to Project roles: Admin to Administrators, User1 to Developers, User2 to Users.
• As an Admin, create an issue with security-level "Project".
• As an Admin, try to add comments and mention User by entering @User.

Expected Results

Jira is expected to prompt only User1 in the suggestions list while using the @user mention.

Actual Results

Jira prompts User1 and User2 in the suggestion list while using the @user mention.

Workaround

Currently, there is no known workaround for this behavior. A workaround will be added here when available.