Uploaded image for project: 'Automation for Jira Server'
  1. Automation for Jira Server
  2. JIRAAUTOSERVER-522

Automation Rule project permission allow user to copy the Authorization header

XMLWordPrintable

    • 0

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Problem

      With the project permission configured in the automation rule, project admin can still access to the System Admin user Authorization header information from the Send web request action:

      But I am a sys-admin and can not deposit one my personal token in a project automation where every project admin can read my token and use it for some obscure operations. This is affects the security of our Jira instance.

      Suggestion

      It would be great if the whole automation rule configuration field was disabled to access or copy from it.

      Another option would be to hide the automation rules without being seen under Project Settings > Project automation > list.

        1. image-2022-08-17-16-51-21-528.png
          105 kB
          John Chin

            [JIRAAUTOSERVER-522] Automation Rule project permission allow user to copy the Authorization header

            Cristian Iorio added a comment -

            In my opinion it is absurd that a solution to this is not yet available. I believe that almost all Security departments will no ifs and buts mouth the implementation of similar automations. Please consider the request quickly and carefully, this way the action related to HTTP requests is almost unusable!

            Cristian Iorio added a comment - In my opinion it is absurd that a solution to this is not yet available. I believe that almost all Security departments will no ifs and buts mouth the implementation of similar automations. Please consider the request quickly and carefully, this way the action related to HTTP requests is almost unusable!

            Tommy Augustine added a comment -

            This would be super helpful for me as a Cloud Admin! Great Suggestion!

            Tommy Augustine added a comment - This would be super helpful for me as a Cloud Admin! Great Suggestion!

              0291f5616540 Konrad Plasota
              ckimloong John Chin
              Votes:
              28 Vote for this issue
              Watchers:
              12 Start watching this issue

                Created:
                Updated: