Bulk Clone plugin - project role permissions bug?

[Doug Swartz]

Environment: JIRA 6.2.4, Bulk Clone 1.0.10

Scenario:

• No users or groups in the default Bulkcloners role
• User does not have BulkCloners role in ProjectA or ProjectB

When the user goes to the Bulk Clone screen in ProjectA, as expected, he does not have cloning ability. Fields, including the BulkClone button are disabled. 

However, when the user goes directly to ProjectB while the BulkClone screen from ProjectA is displayed, he can do a bulk clone successfully in ProjectB. It appears that if you switch to another project while displaying the BulkClone screen, the BulkClone screen is displayed in the second project and the user has rights to do bulk clones in that project whether he should have those rights, or not.

Even if the screen displays incorrectly in ProjectB, allowing the bulk change to be requested, I would expect the clone request to be rejected.

Thank You for taking a look at this,

Doug Swartz

[Lars Broden]

Hi Doug,

a new version 1.0.12 has now been released whtich adresses stdability and user management

try it out

Regards

Lars Broden