When a customer has administrator level permissions but no Jira access, they are not able to view any portals

Steps to Reproduce

1. Have service Desk with either public sign up or any users that exist in JIRA
2. Give a group jira administrator global permissions but not application access
3. Assign an existing user that group

Expected Results

The customer will be able to view the Service Desk Portal

Actual Results

The customer no longer has access to the Service Desk Portal.

Also, the following symptoms are observed:

• When accessing the mail Help Center link, the following error is shown in the UI:

  It looks like you don't have access to this help center. If possible, please try contacting us another way.
  

  

• When sending an email to the Service Desk Mail Handler to create an issue, the following error is found in the Mail logs:

  You don't have permission to access this Service Desk.
  

  

• If the user has not logged yet into Jira and tries to log into the Customer Portal, the login will fail with the following error:

  You do not have a permission to log in. If you think this is incorrect, please contact your Jira administrators.
  

  

Notes

This is especially susceptible when bringing in groups with LDAP and for the most part want the group to have admin access but some may not have application access.

Workaround

• Remove the user from the group
• Give the customer application access