Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-8950

"Current Assignee" on Browse Permission creates security hole

XMLWordPrintable

      Adding "Current Assignee" to the Browse permission for a project lets any user of the system see that project (they can't necessarily view issues or create issues, but they can see the project).

        1. CurrentAssigneeHasAssignablePermission.class
          3 kB

            mark@atlassian.com MarkC
            f2dc2c6450e1 Erik S
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 7h
                7h
                Remaining:
                Time Spent - 2h Remaining Estimate - 5h
                5h
                Logged:
                Time Spent - 2h Remaining Estimate - 5h
                2h