-
Bug
-
Resolution: Fixed
-
Low
-
4.1.0
-
7
-
Severity 3 - Minor
-
5
-
Issue Summary
If Modify Reporter permission is revoked from Service Desk Customer - Portal Access, then customers with mixed-case username can't edit request participants from Customer Portal.
Steps to Reproduce
- Edit an SD project's permission scheme and revoke Modify Reporter permission from Service Desk Customer - Portal Access
- Create a customer account with mixed-case username e.g. Adam
- Raise a request on behalf of Adam in the above project and add a participant to it
- Log in as Adam via Customer Portal
- Try to add a new participant to or remove the existing one from the above request
Expected Results
Participants can be added or removed normally.
Actual Results
- 500 error is thrown for adding participants (sharing)
- 400 error is thrown for removing participants (unsharing)
Workaround
Grant Modify Reporter permission to Service Desk Customer - Portal Access. This doesn't allow customers to modify reporters, so shouldn't be a problem at all.
- is related to
-
JSDSERVER-6337 Adding participants from the Customer Portal does not work when there is an inconsistency with any other custom field
-
- Closed
-
- relates to
-
JSDSERVER-6267 Customers are unable to share request if "Assign issue" permission is not provided
-
- Closed
-
- is cloned by
-
JSMDC-4318 You do not have permission to view this issue
Basically when Sharing a request we are editing the issue with a new value for the request participants field.
What were were also doing was validating that we could edit all of the other fields on the screen, whether we passed them in or not.
Change is to only validate fields that we pass in.