Reply comments do not preserve permission

Issue #19 resolved
Simon Ferrett created an issue

When I reply to a comment that has permission restrictions applied, the reply uses the default permission.

The reply should (IMO) use the same permission as the comment being replied to.

Or, when entering a reply, the option to set the permissions should be available. There's currently no way to enter a reply and give it anything other than the default permission. It can be changed after the fact by editing it, but by then it's too late.

Comments (11)

  1. Rasmus Per Knudsen

    This is actually breaking the security in my JIRA instance. I would love the simple solution were the security level is preserved, so the reply-comment got the same security level as the comment you reply.

  2. Kyle Gershman

    Discovered the same...critical for use of this feature.

    Note, in my testing, the root comment is invisible, but the replies are not.

    Oh...Ironically, the replies are not visible on the "Activity" reports or on the "Activity" list for the issue, which is good...but they are visible in the Comments section.

    We'd also need to make sure that they weren't visible on query of Text contains, mentions, etc.

    Confirmed, visible to query, i.e. Text ~

  3. Ben [Box]

    same issue here, reply should inherit the security on the comment which it is nested below, or permit the replier to set a security on the comment.

  4. David Lewis

    I am also experiencing the same issue as well. We frequently use the reply to comment feature and all these comments end up viewable to the customer. We have to edit the comment after posting and change the security manually. Please add support to default comment to parent's security.

  5. Finest Media

    We are experiencing the same issue as well. This is a critical functionality that needs to be fixed asap. Thanks.

  6. Renjith Pillai repo owner

    All, I made a snapshot version with this feature. Can you please test this in your instance and report if the feature is working fine so that I can go ahead and release this - https://bitbucket.org/vrenjith/jira-threaded-comments/downloads/threaded-comments-1.18-SNAPSHOT.jar

    Thank you in advance and apologies in getting this implemented so late (its an year after Simon raised this)

    @sferrett @rasknud @konradsiejka @KyleGershman @ben_boxin @SVLouie @fmedia

  7. David Lewis

    Thanks so much @vrenjith I have installed and it appears to be working so far. Will update if any of our team encounters a problem.

  8. Renjith Pillai repo owner

    Thank you @SVLouie, I will wait for another day for feedback from others and release this.

  9. Log in to comment