[CONNECTORS-1713] JIRA Repository Connector ignores issue security when ingesting from JIRA 8.20+

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: ManifoldCF 2.22
• Component/s: JIRA connector
• Assignee: Unassigned
• Reporter: Markus Schuch
• Created: 03/Jun/22 06:37
• Updated: 12/Jun/22 10:23

Description

There was obviously a change in the behaviour of the JIRA Server REST API:

The GET /rest/user/viewissue/search has a parameter username.

In JIRA 8.13.x the value must be to double quotes (username="") to fetch all users that have browse permission for the issue.

In JIRA 8.20.x the value must be empty (username=).

I found no information about this change in the JIRA Release Notes.

I raised a question in the Atlassian Dev Community:

https://community.developer.atlassian.com/t/rest-api-change-in-behaviour-of-find-users-with-browse-permission-get-rest-user-viewissue-search/58819

Issue Links

• relates to: CONNECTORS-1493 Jira connector can't fetch user acls on newer systems