-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: 10.4.0, 10.4.1, 10.5.0
-
Component/s: JQL Search
-
None
-
10.04
-
Severity 3 - Minor
Issue Summary
Certain JQLs which accept a list of terms, return all issues the current user has permission to see when the list of terms is empty.
e.g. fooUserField in membersOf(barGroup) where fooUserField is a custom field of type "User Picker & Group Searcher", will return all issues when barGroup is empty.
Steps to Reproduce
- Create a custom field of type "User Picker & Group Searcher" e.g. fooUser
- Create an empty group e.g. barGroup
- Search using the following JQL
fooUser in membersOf(barGroup)
Expected Results
No issues are returned
Actual Results
All issues which the user has permission to see.
Workaround
Disable the com.atlassian.jira.search.api feature flag.