Uploaded image for project: 'ONE'
  1. ONE
  2. ONE-30681

BoxViewer can access marker creation window

    XMLWordPrintable

Details

    • No
    • Agile
    • BigPicture
    • JIRA server
    • 5
    • $i18n.getText("admin.common.words.hide")
      $i18n.getText("admin.common.words.show")
      var cfToHide1 = document.getElementById("rowForcustomfield_18501"); if(cfToHide1){cfToHide1.style.display="none";} var cfToHide2 = document.getElementById("rowForcustomfield_18502"); if(cfToHide2){cfToHide2.style.display="none";} var cfToHide3 = document.getElementById("rowForcustomfield_19700"); if(cfToHide3){cfToHide3.style.display="none";} var cfToHide4 = document.getElementById("rowForcustomfield_18400"); if(cfToHide4){cfToHide4.style.display="none";}
    • Sprint 2021/01, Sprint 2021/02
    • PI2021/1
    • 1 week, 1 day, 22 hours, 30 minutes, 23 seconds
    • 1 day, 22 hours, 28 seconds
    • 1 hour, 34 minutes, 3 seconds
    • 3 days, 22 hours, 25 minutes, 13 seconds
    • 1 hour, 53 minutes, 2 seconds
    • 15 minutes, 56 seconds
    • 16 weeks, 6 days, 1 hour, 13 minutes, 41 seconds
    • $i18n.getText("admin.common.words.hide")
      $i18n.getText("admin.common.words.show")
      var cfToHide1 = document.getElementById("rowForcustomfield_21302"); if(cfToHide1){cfToHide1.style.display="none";} var cfToHide2 = document.getElementById("rowForcustomfield_19201"); if(cfToHide2){cfToHide2.style.display="none";} var cfToHide3 = document.getElementById("rowForcustomfield_19300"); if(cfToHide3){cfToHide3.style.display="none";} var cfToHide4 = document.getElementById("rowForcustomfield_19301"); if(cfToHide4){cfToHide4.style.display="none";} var cfToHide5 = document.getElementById("rowForcustomfield_19302"); if(cfToHide5){cfToHide5.style.display="none";} var cfToHide6 = document.getElementById("rowForcustomfield_19303"); if(cfToHide6){cfToHide6.style.display="none";} var cfToHide7 = document.getElementById("rowForcustomfield_19204"); if(cfToHide7){cfToHide7.style.display="none";} var cfToHide8 = document.getElementById("rowForcustomfield_19205"); if(cfToHide8){cfToHide8.style.display="none";}

    Description

      Prerequisites:
      Add regular Jira user (example name: box viewer) (included in Jira-core and Jira-software Groups). In technical configuration - security add this user as App User. As Admin go to any box and in a box configuration - security add previously created user to role Box Viewer. 

      Reproduction steps:

      • Log in as Box Viewer user created in prerequisites. 
      • Go to Box used in prerequisites.
      • Go to Board/Roadmap module and click on timeline to add marker
      • Enter name and click save button

      Actual result:
      Box Viewer can see marker creation window and can click on save button.

      Expected result:
      Box Viewer has no permissions to click to add new marker. Option is disabled same as on Gantt module.
       
      Workaround:
      N/A

      Attachments

        Activity

          People

            konrad.klepacki Konrad Klepacki (Inactive)
            katarzyna.rajchert Katarzyna Rajchert
            jakub.zygmunt Jakub Zygmunt (Inactive) , tomasz.jaskiewicz Tomasz Jaśkiewicz , mateusz.kielbowicz Mateusz Kielbowicz , michal.dysput Michał Dysput (Inactive) , konrad.klepacki Konrad Klepacki (Inactive) , martyna.turowska Martyna Turowska , system.gerrit Gerrit , michal.koman Michal Koman , mateusz.wyzinski Mateusz Wyzinski , pawel.guz Pawel Guz , robert.wlodarczyk Robert Włodarczyk , katarzyna.rajchert Katarzyna Rajchert
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: