Details
-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
3.0.10, 3.10.1, 4.20.10
-
19
-
Severity 3 - Minor
-
2
-
Description
Summary:
If a User whether it is an agent or customer sending an email with an existing issue key on its subject (or have an intention to comment on an existing ticket), if they don't have the permission to view the ticket due to security level, this misleading "You do not have permission to view this attachment" will shown on the JSD Email Settings "Processing Log"
Steps to reproduce:
- Create a Dummy Service Desk project and set the Mail Channel
- Create a new Issue Security Scheme and set the Security Level as simple as:
- Name: Level 1
- Reporter
- Current Assignee
- agent1
- Assign the scheme to the dummy project.
- As a customer create a ticket
- Back as an agent1, set the security level of that ticket to "Level 1"
- As an agent2 that have the permission to access the project, prepare an email with the issue key as the subject.
- Comment on the mail body and attach a file.
- Send the Email
Expected Result:
- The email will be rejected as the agent2 does not have permission to access the ticket with a message "You do not have permission to view the ticket" on the "Processing Log"
Actual Result:
- The email is rejected with a message "You do not have permission to view this attachment" on the Processing log
Notes:
- Based on my test:
- If there is no attachment, the comment is added even though that user not able to view it.
- If there is an attachment, with the "You do not have permission to view this attachment" the attachment is still added while the comment is not.
Attachments
Issue Links
- relates to
-
JSDCLOUD-5624 You do not have permission to view this attachment
- Closed
- was cloned as
-
QUALITY-367 Loading...