Lucene search

K
atlassianTheidenreichJRASERVER-37117
HistoryFeb 20, 2014 - 12:35 p.m.

Grant "Browse Project" permission to "User Custom Field Value" makes project visible to all users

2014-02-2012:35:31
theidenreich
jira.atlassian.com
26

{panel:bgColor=#e7f4fa}
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? [See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-37117].
{panel}

If in your permission schema, you grant Browse Project permission to “User Custom Field Value”, the project is visible to all users. Regardless of whether that field is filled or not.
JRA-31720 fixed that for the current assignee - i had hoped this would work for custom fields too.

Affected configurations

Vulners
Node
atlassianjira_data_centerRange6.1
OR
atlassianjira_data_centerRange6.3.15
OR
atlassianjira_data_centerRange6.4.12
OR
atlassianjira_data_centerRange7.2.6
OR
atlassianjira_data_centerRange7.2.7
OR
atlassianjira_data_centerRange7.4.1
OR
atlassianjira_data_centerRange7.7.1
OR
atlassianjira_data_centerRange7.8.0
OR
atlassianjira_data_centerRange7.9.0
OR
atlassianjira_data_centerRange7.10.0
OR
atlassianjira_data_centerRange7.11.0
OR
atlassianjira_data_centerRange7.12.0
OR
atlassianjira_data_centerRange7.13.0
OR
atlassianjira_data_centerRange8.5.8