Uploaded image for project: 'Jira Service Management Cloud'
  1. Jira Service Management Cloud
  2. JSDCLOUD-8015

'Service Desk Customer - Portal Access' in Browse Project permission causes side bar to display search suggestions to users with no access to said suggestions

    XMLWordPrintable

Details

    Description

      Summary

      When the browse project permission of a project is set to include 'Service Desk Customer - Portal Access', currently users with JSW application access (but have no access to the project due to not being a JSD customer) , is able to see tickets, boards, projects and filters of the said project. They do not have access to the project in question when clicking on the boards and projects but they are still able to see the projects and issues from suggestions.

      Investigation Done

      Browse project permission set to include 'Service Desk Customer - Portal Access'

      No additional groups besides application access group for user

      User is still able to see the project (AT1) being suggested despite not having access to it.

      Steps to Replicate

      Refer to the investigation steps above.

      Expected Results

      No projects, dashboard, filters or tickets should be return as suggestion

      Current Results

      Projects with Browse Project permission that includes 'Service Desk Customer - Portal Access' will return itself, tickets and dashboards under it as suggestion despite the user having no access to it.

      Note : Can also potentially be due to side bar result caching with the creation of CONFCLOUD-65887 but have no way of verifying on our end.

      Attachments

        1. Untitled.png
          Untitled.png
          55 kB
        2. software-has-admin.png
          software-has-admin.png
          59 kB
        3. screenshot-7.png
          screenshot-7.png
          92 kB
        4. screenshot-6.png
          screenshot-6.png
          84 kB
        5. screenshot-5.png
          screenshot-5.png
          60 kB
        6. screenshot-4.png
          screenshot-4.png
          60 kB
        7. screenshot-3.png
          screenshot-3.png
          12 kB
        8. Screen Shot 2019-05-13 at 4.38.22 pm.png
          Screen Shot 2019-05-13 at 4.38.22 pm.png
          170 kB
        9. Screen Shot 2019-05-13 at 11.43.21 am.png
          Screen Shot 2019-05-13 at 11.43.21 am.png
          158 kB
        10. Screen Shot 2019-05-13 at 11.36.17 am.png
          Screen Shot 2019-05-13 at 11.36.17 am.png
          39 kB
        11. Screen Shot 2019-05-13 at 11.35.51 am.png
          Screen Shot 2019-05-13 at 11.35.51 am.png
          115 kB
        12. Screen Shot 2019-04-04 at 4.36.07 pm.png
          Screen Shot 2019-04-04 at 4.36.07 pm.png
          95 kB
        13. Screen Shot 2019-04-04 at 4.34.16 pm.png
          Screen Shot 2019-04-04 at 4.34.16 pm.png
          55 kB
        14. Screen Shot 2019-04-04 at 4.33.12 pm.png
          Screen Shot 2019-04-04 at 4.33.12 pm.png
          44 kB
        15. Screen Shot 2019-04-04 at 4.29.32 pm.png
          Screen Shot 2019-04-04 at 4.29.32 pm.png
          54 kB
        16. Screen Shot 2019-04-04 at 4.29.25 pm.png
          Screen Shot 2019-04-04 at 4.29.25 pm.png
          62 kB
        17. Screen Shot 2019-04-04 at 4.27.33 pm.png
          Screen Shot 2019-04-04 at 4.27.33 pm.png
          137 kB
        18. Screen Shot 2019-04-04 at 4.25.43 pm.png
          Screen Shot 2019-04-04 at 4.25.43 pm.png
          175 kB
        19. Screen Shot 2019-04-04 at 4.24.19 pm.png
          Screen Shot 2019-04-04 at 4.24.19 pm.png
          83 kB
        20. screenshot-2.png
          screenshot-2.png
          53 kB
        21. screenshot-1.png
          screenshot-1.png
          18 kB
        22. PEGAPCSA80V1_2019.pdf
          543 kB
        23. NCM_20002021610.pdf
          1.01 MB
        24. MS-500.pdf
          655 kB
        25. JN0-647.pdf
          971 kB
        26. JN0-420.pdf
          1.46 MB
        27. JN0-361.pdf
          528 kB
        28. HPE6-A45.pdf
          590 kB
        29. HPE6-A44.pdf
          1.64 MB
        30. he's an admin.png
          he's an admin.png
          34 kB
        31. CLTD.pdf
          1.01 MB
        32. C5050-384.pdf
          1.05 MB
        33. C_HYMC_1802.pdf
          520 kB
        34. C_HANATEC_14.pdf
          459 kB
        35. AICP.pdf
          1.14 MB
        36. access2.mp4
          3.97 MB
        37. access1.mp4
          3.15 MB
        38. access.mp4
          3.25 MB
        39. 9A0-412.pdf
          1.04 MB
        40. 9A0-411.pdf
          546 kB
        41. 3V0-622.pdf
          1.56 MB
        42. 300-160.pdf
          443 kB
        43. 2V0-751.pdf
          1.05 MB
        44. 250-430.pdf
          454 kB
        45. 210-060.pdf
          439 kB
        46. 200-601.pdf
          621 kB
        47. 200-150.pdf
          691 kB
        48. 1Z0-976.pdf
          436 kB
        49. 1Z0-975.pdf
          511 kB
        50. 1Z0-970.pdf
          435 kB
        51. 1Z0-962.pdf
          437 kB
        52. 1Z0-477.pdf
          463 kB
        53. 1Z0-348.pdf
          457 kB
        54. 1Z0-320.pdf
          440 kB
        55. 1Y0-311.pdf
          532 kB
        56. 1Y0-240.pdf
          592 kB
        57. 1D0-437.pdf
          518 kB

        Issue Links

          Activity

            People

              ktarasiuk@atlassian.com Karol
              vchin Vincent Chin (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: