-
Bug
-
Resolution: Fixed
-
Low
-
3.2.4
-
13
-
Severity 2 - Major
-
4
-
Summary
If customers have Browse Projects permission but not Create Issues permission, they:
- can still access Customer Portal
- can't view any requests in My Requests list (-->
JSD-3519) - can't be added as Request Participants to any other requests
Steps to reproduce
- Edit Permission Scheme and remove Service Desk Customer - Portal Access from both Browse Projects and Create Issues permissions
for step 2 and 3, may need to create users and groups first - Add customer1 to group jsd-creator
- Add customer2 to group jsd-participant
- Grant Browse Projects permission to both groups
- Grant Create Issues permission to only group jsd-creator
Observed behaviors
- customer1 can access and raise requests -> expected
- customer2 can access but can't raise requests -> expected
- customer2 can't see any requests in My Requests page, including both those he reported and those he participated in before -> unexpected (-->
JSD-3519) - customer2 can't be added as participant to any other requests -> unexpected
Note
Please note that removing Service Desk Customer - Portal Access from an SD Permission Scheme might not be recommended and may cause unexpected effects:
- is related to
-
JSDSERVER-3519 Not able to view previous "Requests" without "Create Issue" permission
- Closed
-
JSDSERVER-3733 Request Participants not addable, failing with empty error message due to other field validations
- Closed
-
JSDSERVER-3955 Unable to add more participants if participants field contains customers who don't have access to a given Service Desk
- Closed
-
JSDSERVER-5498 Empty required field causes portal share error "Failed to update request participants field"
- Closed
-
JSDSERVER-5516 Error when sharing cannot be viewed due to automatic page refresh
- Closed
- is superseded by
-
JSDSERVER-2067 As a JSD customer, I would like to add participants to just watch issues (Without the ability to create new issues)
- Closed
- mentioned in
-
Page Loading...