-
Type:
Bug
-
Resolution: Fixed
-
Priority:
High
-
None
-
Affects Version/s: 9.12.8
-
Component/s: Project Administration - Permissions
-
None
-
9.12
-
Severity 2 - Major
Issue Summary
User not assigned Administer project or Schedule Issues permission can create releases/versions from Automation jobs
This is reproducible on Data Center: (yes)
Steps to Reproduce
- Create a automation rule to create a version
- Navigate to Project > Project Settings and verify user is not assigned Administer project or Schedule Issues permissions. Issue can also be reproduced just by restricting the Schedule Issues permissions.
- User, though not being assigned Schedule Issues permissions can create Versions/Releases from the more options in the issue
Expected Results
User not assigned Administer project or Schedule Issues permission should not be able to create Versions/Releases for a project.
Actual Results
User not assigned Administer project or Schedule Issues permission can create Versions/Releases for a project from automation rules
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available