We are using Jira Server Service Desk. Incoming customer emails are creating new service desk issues correctly, and a if a customer then responds to a notification email on that issue it does correctly add a comment to that service desk issue.
The problem we have seen is if a certain service desk customer (only role is "Service Desk Customers" on the service desk project) sends an email which has in the in the subject line an issue number from another project (a software project, not service desk project) it creates a comment in that issue.
We do not want service desk customers to be able to do this. I would have expected emails coming in the service desk email handler to only be able to add comments to the service desk project, not any other project in the system?
