-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Forge and Connect - App Permission Sync
Issue Summary:
JSM apps that are invoked by portal-only (custom account) users will only be able to make asApp API requests to resources that support anonymous access. For online user impersonation we have the following feature: https://developer.atlassian.com/changelog/#CHANGE-3278
This means users have fewer permissions than they otherwise should.
Portal-only users should have the correct permissions applied when a Forge app makes API requests on their behalf.
Steps to Reproduce
Expected Results
Offline user impersonation asUser() requests call returns values if the user is a customer
Actual Results
asUser() call returns a permission error if the user is a customer without an atlassian account
Workaround
Use .asApp() for the calls where that works too.
- is cloned from
-
ECO-838 asUser API requests for JSM portal only (customer account) users
- Gathering Interest