-
Suggestion
-
Resolution: Fixed
NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.
Didn't log this as a bug, but some might consider it as such. We gave some external users read-only perms to our JIRA (like jira-users). Discovered shortly thereafter that they were able to transition issues through their workflows. After going through the docs, we began to worry that the only way to prevent this was to put conditions on all of the workflow steps (we have quite a few custom workflows). We confirmed this after talking to support.
This is onerous in our particular case, as we now need to go thru the process of manually updating all of our workflows to preclude this from happening. However, we think it illustrates an omission in the permission model. We understand that from a technical perspective workflows are managed separately via OSWorkflow. However, from a user/admin use case standpoint. A 'read-only' issue should be just that and there should be a more global way to enforce this (i.e. a "Transition Issues" permission), as saying that 'read-only' users can't do this on every transition step is redundant. The workflow conditions are more appropriate for 'fine-grained' checks like only 'testing' can move through this particular transition.
- causes
-
JRASERVER-43725 Add Transition Issue Permission to all users who have Close Issues Permission, during or after an upgrade
- Closed
- is duplicated by
-
JRASERVER-32601 Edit permission should also apply to workflow transitions
- Closed
-
JRASERVER-39325 Permission for transitioning issues
- Closed
- is related to
-
JRASERVER-32601 Edit permission should also apply to workflow transitions
- Closed
- relates to
-
JRACLOUD-11564 Need a "Transition Issue" permission
- Closed
-
JRASERVER-32160 Ability to set a read-only permission
- Closed
-
JSWSERVER-6331 Greenhopper Simplified Workflow transition conditions
- Closed
- is cloned by
-
JDEV-27590 Loading...
- mentioned in
-
Page Loading...