Issue Summary

The values of custom fields that were disabled can be updated via REST requests.

• Select List (multiple choices)

This is reproducible on Data Center: yes

Steps to Reproduce

1. Configure a custom field with select list multiple choice
2. Add multiple options
3. Disable one option and ensure that it is not displayed on the screens.
4. Run the following REST request

   PUT: https://<<DC-URL>>/rest/api/2/issue/<<ISSUE-KEY>>
   
   {
     "fields": {
       "summary": "This is the summary of the issue",
       "description": "And this is the description",
       "customfield_11100": [{  "value": "testdd4"}]
     }
   }
   

   "testdd4" is the disabled value
   "customfield_11100" is the custom field 

Expected Results

Only non-disabled entries should be updated.

Actual Results

All the custom field values can be updated

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available