Automatic access added to newly added bitbucket account without notificiation

XMLWordPrintable

      Steps to replicate:

      1. Add a new bitbucket account to your JIRA OnDemand instance via the DVCS connector.
      2. Click on the cog to the right of your new account and view 'configure automatic access'

      Result:

      Automatic access will be set up and membership to the 'developers' group will be granted

      Expected result:

      Either no automatic access will be set up, or during the creation process you should be warned that automatic access has been granted.

      This is a security concern for users that add people that should have access to the repository to their OD account, as access will be granted unknowingly.

      It also becomes more of a problem now that UNIFIED-79 has been released, as it's not at all obvious that membership is granted anymore.

            Assignee:
            Unassigned
            Reporter:
            Matthew Hunter
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated: