Uploaded image for project: 'Jira Service Management Cloud'
  1. Jira Service Management Cloud
  2. JSDCLOUD-16425

Portal customers can tag disabled/deleted users on the portal

XMLWordPrintable

      Problem

      Customers can tag disabled/deleted users on the portal, but Agents can't.

      Environment

      Jira Service Management Cloud

      Steps to Reproduce

      1. Add a user to the project with relevant roles.
      2. Add the user to the Organization.
      3. Set customer sharing to one of the below two:
        • Customers can search for other customers within their organizations
        • Customers can search for other customers within their organizations, or manually enter the email address of other customers within their project
      4. @mention the user to any issue.
      5. Suspend the user from the site.
      6. Try to tag the user from the portal account, you'll still be able to tag this user.
      7. Tag the user from the Agent view, the user will not be listed.

      The issue does not happen with the below customer sharing setting:
      Customers can search for other customers within their project or organization

      Expected Results

      Customers should not be able to tag Deleted/Deactivated users.

      Actual Results

      Deleted/Deactivated users can be tagged by the portal customers.

      Workaround

      • Use the below customer sharing permission:
        Customers can search for other customers within their project or organization

      OR

      • Remove the user from the Customer organizatiom before deleting or suspending the user from the site.

              Unassigned Unassigned
              f4c8d44d92af Barkha Bansal
              Votes:
              2 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: