Watchers can be added to a project without having rights in that project

Type atlassian
Reporter gkingsley
Modified 2019-03-27T23:57:25


A user of Jira at our site has found that two people he added to watchers on this project were only members of the Jira Users group and had no rights in the project. Therefore Jira silently did not send any notifications and they did not receive the information that the original user thought they were getting.

Jira should either not allow staff to be added as watchers who have no rights to watch or (less ideally) should send notifications to the staff but the contents of the notification should say something like "You have received this notification because you are watching issue FOO-1 but you have to rights to view this issue. Please contact <admin link> for assistance".