Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-8950

"Current Assignee" on Browse Permission creates security hole

XMLWordPrintable

      Adding "Current Assignee" to the Browse permission for a project lets any user of the system see that project (they can't necessarily view issues or create issues, but they can see the project).

        1. CurrentAssigneeHasAssignablePermission.class
          3 kB

              mark@atlassian.com MarkC
              f2dc2c6450e1 Erik S
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Estimated:
                  Original Estimate - 7h
                  7h
                  Remaining:
                  Time Spent - 2h Remaining Estimate - 5h
                  5h
                  Logged:
                  Time Spent - 2h Remaining Estimate - 5h
                  2h