threads of Restricted comments ignore permissions

Issue #16 resolved
TrentM created an issue

I created a comment restricted to a Project Role. I then added a threaded comments. The threaded comments were visible to users outside of the original comment permission role.

The software should either prevent a restricted comment from being threaded - OR, the threaded comment should have the same permissions as the parent.

Comments (3)

  1. TrentM reporter

    Happy to help fund your development of this plugin if it means we can resolve some of these issues more quickly.

  2. Renjith Pillai repo owner

    Trent M, The threaded comments never brings up any comment which are not originally shown by JIRA core. It only rearranges them based on the comment reply.

    If the restricted comment that you are mentioning is appearing, please test it with disabling the add-on and see if it is appearing. It has to.

    Btw, a new version if released will is major bug fix version and I request you to test it with that. It also has a correction (or better implementation) for permission checks.

  3. Log in to comment