Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-81318

Don't show users (or Portal Only Customer) who doesn't have Jira application access to appear on assignee, reporters and project roles list

    XMLWordPrintable

Details

    • 369
    • 44
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      I know this sounds like a duplicate of JRA-7659, but that one is about the perfect generic solution to the user picker problem.

      This issue here is about a basic (small) but necessary improvement: don't show users who don't have access to jira!

      Most people will benefit from it, since almost any jira instance will have some old users accounts floating around, which have no access to the instance anymore (because they left the company, or...). It is even possible to select Portal Only customer as a reporter and project roles for non-Jira Service Desk issues.

      Steps to replicate

      Scenario 1

      1. Invite User as a Portal Only customer
      2. Go to Project Settings
      3. Click on People and add People.
      4. Type a Portal only customer and add any roles.
      5. "GG" audit Log

      Scenario 2

      1. Invite User to your instance (and revoke access to Jira) or as a Portal Only customer
      2. Create an issue
      3. Select the User who doesn't have Jira access or Portal Only customer as the reporter

      Expected

      • User who doesn't have Jira access or Portal Only customer isn't visible through the reporter/user picker list
      • User who doesn't have Jira access or Portal Only customer can't be assign to Project Roles

      Actual Result

      • User who doesn't have Jira access or Portal Only customer can be added on Project Roles
      • They can also be assigned to any Roles
      • Audit Log show the portal only customers ID Starting with "qm:..."
      • User who doesn't have Jira access or Portal Only customer able to be selected as the reporter (even for non-Jira Service Desk issues)

      Suggestion

      Hide or Restrict the Portal Only Customer/User without access from appearing on projects where they shouldn't be.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              d7c646f367ae Valentijn Scholten
              Votes:
              177 Vote for this issue
              Watchers:
              147 Start watching this issue

              Dates

                Created:
                Updated: