Lucene search

K
atlassianMhunterJRASERVER-35917
HistoryNov 22, 2013 - 3:08 a.m.

JIRA Workflow Step Property jira.permission.browse allows you to view issues in issue navigator

2013-11-2203:08:57
mhunter
jira.atlassian.com
9

{panel:bgColor=#e7f4fa}
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? [See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-35917].
{panel}

h3. Summary
The JIRA Workflow Step Property {{jira.permission.browse}} does not prevent you to view issues in issue navigator.

h3. Steps to replicate:

Create an issue

Create a group named ‘test’

Edit the workflow for the project of the issue created in step 1.

Click ‘View Properties’ next to the step the issue created in step 1 is currently in.

Add the following property

{noformat}
key: jira.permission.browse.group.1
value: test
{noformat}

Search for the issue created in step 1 (ensuring you are not in the group ‘test’)

h3. Result:
The issue navigator will show the issue, but when you try and click into it you will receive the message:
{quote}
<Issue Key> can not be opened. The issue may have been deleted or you might not have permission to see the issue.
{quote}

h3. Expected Result:
You shouldn’t be able to see the issue in the issue navigator.

h3. Notes:
This was also tested and reproduced with the {{jira.permission.browse.reporter}} property.

Affected configurations

Vulners
Node
atlassianjira_data_centerRange6.2-OD-3
OR
atlassianjira_data_centerRange6.4.11