Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-10954

Restricted attribute(s) deleted when object edited by user without all attribute permissions

XMLWordPrintable

      Issue Summary

      When a user without permission on all attributes edits the object the restricted attributes are deleted. This happens only on the new object view page.
      This looks like a regression of and old bug ICS-1358 affecting the new object view page

      Steps to Reproduce

      1. Log in as Admin
      2. Create an Object Type - A, with an Object Attribute Type (Reference) to reference Object Type B
      3. Create an Object A1 referencing Object B1
      4. Grant Manager permission to User X on Object Type A.
      5. Make sure User X does not have any Permission on Object Type B - so the Attribute in (2) is not visible to User X
      6. Log in as User X, note that you can see Object A1, but you do not see the Attribute containing Object B1
      7. Open the object in the new object view page http://<BASE-URL>/secure/insight/assets/XXX-1234 as User X
      8. Click Edit and save with/without making any changes

      Expected Results

      The restricted attribute(s) from User X are kept intact

      Actual Results

      The restricted attribute(s) from User X are deleted

      Workaround

      The old object schema view is no longer impacted by this bug. Ask users to edit restricted objects from the old view http://<BASE-URL>/secure/ObjectSchema.jspa?id=XXX&typeId=YYYY&objectId=ZZZ

              828a13f9a5a4 François Dénommée (Inactive)
              smitra2@atlassian.com Suddha
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: