-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Low
-
None
-
Affects Version/s: 7.2.3, 7.2.4, 7.2.7
-
Component/s: AgileBoard
-
7.02
-
2
-
Severity 3 - Minor
-
2
Summary
When right clicking an issue in an Agile Board, the delete option appears even if a user does not have the Delete Issue permissions. If a non-privileged user chooses to delete, they get the following message:
It seems that you have tried to perform an operation which you are not permitted to perform.
If you think this message is wrong, please contact your JIRA administrators.
Steps to Reproduce
- Create a new user.
- Ensure that the user does not have Delete Issues permission for a project.
- Navigate to an issue in that project, and select the More menu to verify that the delete option is not present.
- Navigate to an Agile board.
- Right click an issue, and notice that the Delete option is available.
- Click Delete to get the error message above.
Expected Results
No delete option will be available, similarly to how the More menu on the Issue View works.
Actual Results
The delete option does appear, and throws an error when selected.
Workaround
Update the announcement banner to hide the delete option on boards:
<style>
a#ghx-issue-ctx-action-delete {display:none} /* Removes delete issue option from Agile Board issue cards*/
</style>
- This will hide the "Delete" option when right-clicking an issue on the Agile Board
- Admins can still delete tickets by simply bringing up the "Issue Detail View" and clicking on the "..."
- relates to
-
JSWSERVER-26450 Non-admin users are able to interact with the greyed-out Agile Board "Delete" button
-
- Gathering Impact
-