-
Bug
-
Resolution: Unresolved
-
Medium
-
None
-
4.4.1, 4.4.5, 5.0.7, 5.1.2, 5.1.3, 5.2.11, 6.3.15, 7.0.4, 7.1.9
-
4.04
-
22
-
Severity 2 - Major
-
40
-
NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.
Summary
There is currently no method to prevent sub-task creation on a specific workflow status.
The following Workflow Properties have no effect on users being able to create sub-tasks.
- jira.permission.create
- jira.permission.subtasks.create
Administrators are unable prevent users from creating Sub-tasks with this current bug. When viewing an issue in the state where that permission should be locked down, there is still an option for creating a sub-task.
Steps to Reproduce
JIRA 6.3 was used to replicate this issue:
- Open the Workflow Editor ("Administration -> Projects -> <SELECTED-PROJECT> -> Workflow -> Edit)
- Add the following Workflow Properties to one of the steps:
- jira.permission.create and set to denied
- jira.permission.subtasks.create and set to denied
- Publish the edited workflow
- Create a new issue for <SELECTED-PROJECT> and transition to the edited Step (Issue Status).
- Attempt to create a new "Sub-task" for the issue. Observe that the user is able to do so.
- Observe that this "Sub-Task" is created and linked to the issue.
Expected Results
The workflow property should have prevented the Sub-Task from being created.
Actual Results
The workflow property had no effect on the User's ability to create a new Sub-Task.
Notes
- Attached Screenshots for all windows showing the settings applied when demonstrating this issue. (JIRA 4.4)
- Specifically: One of the permissions is the Create permission, which was denied to everyone.
- When viewing an issue in the state where that permission should be locked down, there is still the option for creating a sub-task.
- User was able to click on "Create Sub-Task" and create a sub-task which looks fine and shows that it is a sub-task of the parent issue. However, when you go back to the parent issue, you do not see any sub-tasks for that issue. (JIRA 4.4)
- The last part of the parent not knowing of it's sub-tasks is not very important because the first part of a sub-task still being able to be created shouldn't even be available or allowed based on the permissions that i set in the state of the workflow. (JIRA 4.4)
- JRA-10077 - Mentions a suggestion to refactor some of the permissions relating sub-task creation.
Workaround
In some circumstances users can prevent all edits to an issue at a specific workflow status:
- Edit the project Workflow, as per: Configuring Workflow
- Click "View Properties" for the targeted step.
- Add a new property jira.issue.editable with value false (as per Workflow properties)
- Publish the edited workflow.
This will prevent all edits being made to an issue when at the defined state. The workaround can be used to prevent the user from creating sub-tasks on closed or resolved issues.
- is caused by
-
JRASERVER-10077 Refactor permissions code to get rid of "jira.issue.subtasks-creatable"
- Gathering Interest
- is duplicated by
-
JRASERVER-28797 Workflow permission subtask create parameters not working (jira.permission.subtasks.create.*)
- Closed
- is related to
-
JRASERVER-8521 Add permission type Create Sub-Tasks ( better: Create Sub-Issues )
- Closed
-
JRASERVER-5476 Restrict Create Subtask to certain user groups only
- Gathering Interest
- relates to
-
JRACLOUD-26208 Subtasks can be created even when create permission is removed via Workflow state Properties
- Gathering Impact
- mentioned in
-
Page Loading...