Customers can see and create requests in other portals

[jaccovanderpost]

JIRA Service Desk 7.1.8

Steps to reproduce:

1. Create 2 projects
2. Set for both Request security on Only people on my customers list can raise a request
3. Create an user without Application access for JIRA Service Desk
4. Add for only 1 project the user to a role service desk customer
5. Login as the customer in the customer portal and click on Help Center. The customer can now access and create issues on all portals.

This bug makes this product unusable. We do not want customers to access other projects! 

[Meck · Accepted solution]

Hi Jacco van der Post,

You should contact Atlassian Support. I made the reproduce steps and work it well.

Regards,

Lameck.

[jaccovanderpost]

Hi @Lameck Oliveira [Diferencial TI],

Thanks for responding.

What version are you using?

Friendly greets,

Jacco

[Meck]

Cloud version.