Issue Summary

The /rest/api/2/user/assignable/multiProjectSearch Incorrectly Lists Non-JSM Licensed Users as Assignable

Steps to Reproduce

1. Create a test user without application (JSM) access.

1. In the project settings, assign this user the "Administrator" or "Service Desk team" role.

1. Attempt to assign any issue to this user. You will receive an error: "test user cannot be assigned issues" (as expected, since the user lacks a JSM license).

1. Call the /rest/api/2/user/assignable/multiProjectSearch endpoint and include the test user in the query.

Expected Results

The API should not return the test user in the results, as the user is not assignable due to the absence of a JSM license.

Actual Results

The API returns the test user as assignable, even though the user does not have a JSM license.

Environment

JSM: 9.12.26, 10.3.x

Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available