-
Bug
-
Resolution: Fixed
-
High (View bug fix roadmap)
-
8.1.2, 8.2.3, 8.3.0
-
8.01
-
Severity 2 - Major
-
1
-
Issue Summary
When clicking on the Boards link in the top navigation bar is showing a section of 'Recent Boards'. In Jira Software 8.1.2 and higher (possibly other versions), it appears that this recent board list is no longer showing unique results to each user, but instead it looks like this resource is sharing the recent boards of other JSW users (provided that your account also has access to that same board).
Environment
Tested in 8.1.2, 8.2.3 and found this unexpected functionality happens.
However when trying to replicate in 7.13.1, and 8.0.2, this behavior does not happen. In these older versions each user appears to have their own recent boards values that are only generated by the boards they view.
Steps to Reproduce
- Create a new board (AAA project key for this example)
- Create a second Jira software licensed user
- Login as the newly created 2nd user, and then create a new board with board name (TEST)
- In a new browser (incognito) login as user 1 again, then visit the Boards -> recent boards
Expected Results
If user #1 has not recently been to board TEST, they should not see it in the recent list
Actual Results
User #1 sees TEST board in the recent boards list
Notes
This does not appear to leak names of ALL boards exactly. Your user account can still only see in the recent boards entries that your account actually has permissions to see. However this recent board should be bound to the currently logged in user and that is not what appears to be happening right now.
^ shows recent boards of other users, not the current user right now
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
- mentioned in
-
Page Failed to load
| Form Name | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
[JSWSERVER-20210] View recent boards shows boards that all users have viewed instead of board your account viewed
| UIS | New: 1 |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: Waiting for Release [ 12075 ] | New: Closed [ 6 ] |
| Description |
Original:
h3. Issue Summary
When clicking on the Boards link in the top navigation bar is showing a section of 'Recent Boards'. In Jira Software 8.1.2 and higher (possibly other versions), it appears that this recent board list is no longer showing unique results to each user, but instead it looks like this resource is sharing the recent boards of other JSW users (provided that your account also has access to that same board). h3. Environment Tested in 8.1.2, 8.2.3 and found this unexpected functionality happens. However when trying to replicate in 7.13.1, and 8.0.2, this behavior does not happen. In these older versions each user appears to have their own recent boards values that are only generated by the boards they view. h3. Steps to Reproduce # Create multiple Agile boards (AAA, TEST project keys for this example) # Create a second Jira software licensed user # Login as the newly created 2nd user, and go to board (TEST) # In a new browser (incognito) login as user 1 again, then visit the Boards -> recent boards h3. Expected Results If user #1 has not recently been to board TEST, they should not see it in the recent list h3. Actual Results User #1 sees TEST board in the recent boards list h3. Notes This does not appear to leak names of ALL boards exactly. Your user account can still only see in the recent boards entries that your account actually has permissions to see. However this recent board should be bound to the currently loggedin user and that is not what appears to be happening right now. !Screen Shot 2019-08-28 at 5.07.47 PM.png|thumbnail! ^ shows recent boards of other users, not the current user right now h3. Workaround Currently there is no known workaround for this behavior. A workaround will be added here when available |
New:
h3. Issue Summary
When clicking on the Boards link in the top navigation bar is showing a section of 'Recent Boards'. In Jira Software 8.1.2 and higher (possibly other versions), it appears that this recent board list is no longer showing unique results to each user, but instead it looks like this resource is sharing the recent boards of other JSW users (provided that your account also has access to that same board). h3. Environment Tested in 8.1.2, 8.2.3 and found this unexpected functionality happens. However when trying to replicate in 7.13.1, and 8.0.2, this behavior does not happen. In these older versions each user appears to have their own recent boards values that are only generated by the boards they view. h3. Steps to Reproduce # Create a new board (AAA project key for this example) # Create a second Jira software licensed user # Login as the newly created 2nd user, and then create a new board with board name (TEST) # In a new browser (incognito) login as user 1 again, then visit the Boards -> recent boards h3. Expected Results If user #1 has not recently been to board TEST, they should not see it in the recent list h3. Actual Results User #1 sees TEST board in the recent boards list h3. Notes This does not appear to leak names of ALL boards exactly. Your user account can still only see in the recent boards entries that your account actually has permissions to see. However this recent board should be bound to the currently logged in user and that is not what appears to be happening right now. !Screen Shot 2019-08-28 at 5.07.47 PM.png|thumbnail! ^ shows recent boards of other users, not the current user right now h3. Workaround Currently there is no known workaround for this behavior. A workaround will be added here when available |
| Affects Version/s | Original: 8.4.0 [ 87494 ] |
| Fix Version/s | New: 8.4.0 [ 87494 ] |
| Status | Original: In Progress [ 3 ] | New: Waiting for Release [ 12075 ] |
| Status | Original: Gathering Impact [ 12072 ] | New: In Progress [ 3 ] |
| Priority | Original: Medium [ 3 ] | New: High [ 2 ] |
| Status | Original: Needs Triage [ 10030 ] | New: Gathering Impact [ 12072 ] |
| Labels | Original: er85 pse-request warranty | New: er85 flash pse-request warranty |