Uploaded image for project: 'Jira Service Management Cloud'
  1. Jira Service Management Cloud
  2. JSDCLOUD-10055

Don't show users (or Portal Only Customer) who doesn't have Jira application access to appear on reporters and project roles list

    XMLWordPrintable

    Details

    • UIS:
      2
    • Feedback Policy:

      Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Description

      I know this sounds like a duplicate of JRA-7659, but that one is about the perfect generic solution to the user picker problem.

      This issue here is about a basic (small) but necessary improvement: don't show users who don't have access to jira!

      Most people will benefit from it, since almost any jira instance will have some old users accounts floating around, which have no access to the instance anymore (because they left the company, or...). It is even possible to select Portal Only customer as a reporter and project roles for non-Jira Service Desk issues.

      Steps to replicate

      Scenario 1

      1. Invite User as a Portal Only customer
      2. Go to Project Settings
      3. Click on People and add People.
      4. Type a Portal only customer and add any roles.
      5. "GG" audit Log

      Scenario 2

      1. Invite User to your instance (and revoke access to Jira) or as a Portal Only customer
      2. Create an issue
      3. Select the User who doesn't have Jira access or Portal Only customer as the reporter

      Expected

      • User who doesn't have Jira access or Portal Only customer isn't visible through the reporter/user picker list
      • User who doesn't have Jira access or Portal Only customer can't be assign to Project Roles

      Actual Result

      • User who doesn't have Jira access or Portal Only customer can be added on Project Roles
      • They can also be assigned to any Roles
      • Audit Log show the portal only customers ID Starting with "qm:..."
      • User who doesn't have Jira access or Portal Only customer able to be selected as the reporter (even for non-Jira Service Desk issues)

      Suggestion

      Hide or Restrict the Portal Only Customer/User without access from appearing on projects where they shouldn't be.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              valentijn.scholten Valentijn Scholten
              Votes:
              42 Vote for this issue
              Watchers:
              50 Start watching this issue

                Dates

                Created:
                Updated: