JIRA Service Desk 7.1.8 Steps to reproduce: * Create 2 projects * Set for both Request security on Only people on my customers list can raise a request * Create an user without Application access for JIRA Service Desk * Add for only 1 project the user to a role service desk customer * Login as the customer in the customer portal and click on Help Center. The customer can now access and create issues on all portals. This bug makes this product unusable. We do not want customers to access other projects!

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Customers can see and create requests in other portals

jaccovanderpost

JIRA Service Desk 7.1.8

Steps to reproduce:

Create 2 projects
Set for both Request security on Only people on my customers list can raise a request
Create an user without Application access for JIRA Service Desk
Add for only 1 project the user to a role service desk customer
Login as the customer in the customer portal and click on Help Center. The customer can now access and create issues on all portals.