JIRA sends in-app notifications to Confluence for restricted comments

2014-01-29T15:42:23
ID ATLASSIAN:JRASERVER-36766
Type atlassian
Reporter aconde
Modified 2019-03-28T00:12:46

Description

If you have a primary application link between JIRA in Confluence, users get a notification in their Confluence workbox everytime someone comments in a ticket the user is watching. Users receive the notification (with the text of the comment) even when the comment is restricted to other groups, disclosing the restricted information to users without enough permissions.