Issue Summary

When you allow external emails to be added as comments on issues, customer accounts without access to a request can add a comment to a request by sending an email and including the issue key in the subject.
Jira also allows you to restrict activity on certain issue statuses using workflow properties. For example, the "jira.permission.comment.denied" property will "disable comments when an issue is on a particular status. For example, you can add this to a resolution status if you don’t want people commenting after you’re done with an issue".

On a site with both these settings, external emails will still be added as comments even when the issue is in a status where comments are disabled due to the workflow property.

Steps to Reproduce

1. Configure Jira Service Management to allow external emails to be added as comments on issues
2. Configure Jira Service Management to process email replies to closed requests as new requests
3. Create a new request, and transition to closed
4. Confirm that a comment cannot be added via the issue view or the customer portal
5. Send an email from a customer account that doesn't have access to the request and include the issue key in the email subject

Expected Results

The email raises a new issue in the service project.

Actual Results

A comment is added to the closed issue.

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available