threads of Restricted comments ignore permissions
I created a comment restricted to a Project Role. I then added a threaded comments. The threaded comments were visible to users outside of the original comment permission role.
The software should either prevent a restricted comment from being threaded - OR, the threaded comment should have the same permissions as the parent.
Comments (3)
-
reporter -
reporter @vrenjith - any thought into the above proposition?
-
repo owner - changed status to resolved
Trent M, The threaded comments never brings up any comment which are not originally shown by JIRA core. It only rearranges them based on the comment reply.
If the restricted comment that you are mentioning is appearing, please test it with disabling the add-on and see if it is appearing. It has to.
Btw, a new version if released will is major bug fix version and I request you to test it with that. It also has a correction (or better implementation) for permission checks.
- Log in to comment
Happy to help fund your development of this plugin if it means we can resolve some of these issues more quickly.