Uploaded image for project: 'Jira Software Data Center'
  1. Jira Software Data Center
  2. JSWSERVER-14840

The Add Comment function still visible from the board even though the logged in user does not have the Add Comment permission

    XMLWordPrintable

Details

    Description

      Summary

      When a user views an issue on the board, the user can still able to see the Add Comment function even though the user does not have the Add Comment permission.

      Environment

      JIRA v1000.319.1
      JIRA Agile v1000.38.1

      Steps to Reproduce

      1. Login as any user who has the permission to view Scrum board
      2. Revoke the Add Comment permission from this user
      3. Go to the Scrum board
      4. Select any issue and it will be displayed at the right section
      5. Click on Add Comment and add a text
      6. Click on Add to add the comment
      7. Error below will be displayed:
        • Communications Breakdown
          The JIRA server could not be contacted. This may be a temporary glitch or the server may be down.
          Close this dialog and press refresh in your browser 
          
        • From Developer Console:

      Actual Results

      The user can see the Add Comment button

      Expected Results

      The user should not be able to see the Add Comment function at the first place

      Notes: The error message is somehow misleading and should be improved with an informational message.

      Attachments

        Activity

          People

            Unassigned Unassigned
            nhassan Nur Asnida Hassan (Inactive)
            Votes:
            2 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated: