The documentation states that the REST API "/rest/api/2/project/{projectIdOrKey}" requires the "Browse Projects" permission and mentions that a 404 error is returned when the user lacks permission to view it.
However, I've observed that if the user is a Jira administrator, the API returns a 200 status code with the correct response body, even if they do not have permission to browse the project. Is this behavior intended?
Strange!!! I know if it's getting authenticated with service account instead of human account then permission might be a concern
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.