Summary

While it is possible to block users from logging time spent on issues in a specific state by using the jira.permission.work.denied workflow property key, this does not account for deleting and editing worklogs.

This means that users who cannot log work on an issue would still be able to modify or delete an existing worklog entry.

Proposed solution

The property blocks users from logging work by restricting the following permissions:

• Work On Issues
• Log Work For Others

This property key should also block users from editing and editing worklog entries by restricting the following permissions:

• Delete All Worklogs
• Delete Own Worklogs
• Edit All Worklogs
• Edit Own Worklogs