Uploaded image for project: 'Xray for Jira Cloud'
  1. Xray for Jira Cloud
  2. XRAYCLOUD-6040

When setting jira.permission.edit.projectrole workflow property to define roles, which can edit an issue in each status, and when applying this status to a Test Execution, for other users is still possible to delete and archive Test Runs

    XporterXMLWordPrintable

Details

    • Bug
    • Status: Blocked
    • Major
    • Resolution: Unresolved
    • 3.006.000-1
    • None
    • Security
    • XRAYCLOUD 2023 Sprint 10, XRAYCLOUD 2023 Sprint 11
    • UNCOVERED

    • Impediment

    Description

      Description

      When setting jira.permission.edit.projectrole workflow property to define roles, which can edit an issue in each status, and when applying this status to a Test Execution, for other users is still possible to delete and archive Test Runs.

      Actual result/Attachments

      Currently, Xray obeys the Jira Permissions. So if a user has permission to Edit an issue, the user will be able to delete those Test Runs. The property set on the workflow for the particular status is only partially being respected. You cannot alter anything on the Test Execution, but is still possible to delete/archive Test Runs.

      For the moment, this is only disabled when the user does not have such permission and/or the workflow property issue.editable is set as false.

      Expected result

      Even when using more granular workflow properties, if a Test Execution is locked, then it should not be possible to Remove and Archive Test Runs.
      This should happen as well on the Test side. Although the Delete button on Test Runs is not presented, the Archive is still there.

      Attachments

        Activity

          People

            bmpc Bruno Conde
            amgt Ana Teixeira
            Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: