Github user mcgilman commented on the issue:
https://github.com/apache/nifi/pull/2167
I don't think we can always add the group name to the BulletinDTO. A user
could have permissions to the component generating the bulletin but not the
Process Group the component lives in. Adding it to the Bulletin model
server-side and exposed via the ReportingContext should ok though.
FYI - The source name is fair game as the BulletinDto is not set in the
BulletinEntity when they lack permissions to the source.
---