RY displays requirement content to users who have no permissions to view a space

Description

Steps to reproduce:

  • Create Confluence space A

  • Confluence space B

  • Define a requirement REQ-001 in space A

  • Create a link to REQ-001 from a page in space B

  • Give user X only access to space B, not to space A

Expected behaviour:

  • User X does not see content of REQ-001.

Actual behaviour:

  • User X sees content of REQ-001 in RY popup.

Environment

None

Observations

None
Resolved

Assignee

Unassigned

Reporter

Adrien Ragot (Play SQL / Requirement Yogi)

Labels

None

Participants

None

Fix versions

Priority

Matter of days