Uploaded image for project: 'SR for Jira - Development'
  1. SR for Jira - Development
  2. SRJIRA-5529

archivedVersions JQL function does not return results if a version is in a project the current user cannot browse

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Done
    • Low
    • Resolution: Fixed
    • None
    • 6.34.0
    • None
    • SR4J Sprint 106
    • 0.7

    Description

      The archivedVersions() JQL function is not correctly checking that the current user has BROWSE_PROJECTS permission in the related project for each version. Currently an error is being shown when searching if an archived version exists and a user cannot browse the related project for that version.

      Steps to reproduce:

      1. Create a project (A) and remove the Browse Projects permission for a user
      2. Create a version in the above project and then archive it
      3. Create another project (B), but this time grant Browse Projects permission to the user from above step
      4. Create a version in the above project and then archive it
      5. Perform a JQL search as the user lacking browse permission, e.g fixVersion in archivedVersions()

      Expected behaviour:

      • JQL search will succeed and only issues from projects the logged in user can browse will be shown (project B).

      Actual behaviour

      • JQL search fails and no results are returned, an error is shown: "A value provided by the function 'archivedVersions' is invalid for the field 'fixVersion'"

       

      Attachments

        Activity

          People

            rlander Reece Lander
            rlander Reece Lander
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: