-
Bug
-
Resolution: Won't Fix
-
High
-
17
-
Minor
-
25
-
Issue Summary
When implementing the property(jira.permission.edit.group) in status, it seems that we are still able to edit the issue.
Steps to Reproduce
- Go to a workflow
- Click on a status and click on properties
- Add "jira.permission.edit.group" as key and add an existing group
- Go to an issue and transition to the status that has the property
Expected Results
The issue should be editable only by users of the group specified in the property
Actual Results
Users other than the ones added to the specified group will be able to
- add comments
- link issues
- create subtasks
- change assignee
Permission granted through the permission scheme overrides the restriction set in the workflow property. Fields like Summary, Description, and other custom fields will not be editable.
Workaround
Use finer grained permission control e.g.
- `jira.permission.comment.*` controls comments.
- `jira.permission.assign.*` controls assignment.
- `jira.permission.link.*` controls linking.
Please note, you can review the full list of permissions here: https://support.atlassian.com/jira-cloud-administration/docs/use-workflow-properties