Uploaded image for project: 'Jira Software Data Center'
  1. Jira Software Data Center
  2. JSWSERVER-25839

User Picker from Reporter field is allowing to add users who do not have Browse Project permission

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Low
    • None
    • 9.3.3, 9.12.1, 9.14.0, 9.4.17
    • Issue - Fields
    • None

    Description

      Issue Summary

      This is reproducible on Data Center: yes

      Steps to Reproduce

      1. Create a Software Project
      2. Create a user "test1"and do not assign a license for it
      3. On the Project Permission scheme make sure only Application Access Jira Software has Browse Project permission
      4. Try to find this user on the Reporter field, it shows No Matches, as expected, as this user does not have Browse Project permission
      5. However if you click anywhere on the screen, outside the field, the user is set as Reporter

      Expected Results

      We shouldn't be able to add the user by manually typing it's username, as this user does not have Browser Project permission.

      Actual Results

      Manually typing the username and clicking anywhere on the screen add the user as Reporter

      Workaround

      No workaround

      Attachments

        Activity

          People

            Unassigned Unassigned
            a0a054388f60 Mikaela Teixeira
            Votes:
            1 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: