Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-72517

Workflow Permissions around issue creation are not enforced consistently between the UI & REST API

XMLWordPrintable

    • 7.13
    • 16
    • Severity 2 - Major
    • 216
    • Hide
      Atlassian Update – 22 January 2024

      Hi everyone,

      This issue has been reviewed by the Jira Data Center Development team. As a result of our investigation, we have decided to not fix this issue. UI Issue creation permissions can't be controlled by properties provided in workflow in case of both transitions and states. Please use project permissions scheme instead.

      Best regards

      Roman Kolosovskiy

      Sr.Product Manager, Jira Data Center

      Show
      Atlassian Update – 22 January 2024 Hi everyone, This issue has been reviewed by the Jira Data Center Development team. As a result of our investigation, we have decided to not fix this issue. UI Issue creation permissions can't be controlled by properties provided in workflow in case of both transitions and states. Please use project permissions scheme instead. Best regards Roman Kolosovskiy Sr.Product Manager, Jira Data Center

      Issue Summary

      When the ability to create issues has been disabled via workflow permission for all users, one can still create a new issue via the GUI. The REST API disallows this (which feels like the correct behavior).

      Steps to Reproduce

      1. Edit the workflow of issue type T in project P
      2. Click View Properties at the initial step e.g. Open
      3. Add this property: 
        Key: jira.permission.createissue.denied
Value: true
      1. Publish the workflow
      2. Attempt to create a new issue P-1 via the GUI using issue type T in project P
      3. Attempt to create another issue via the REST API.

      Expected Results

      No new issues can be created, as this ability has been disabled by the workflow permission.

      Actual Results

      A new issue can still be created via the GUI (using the "Create" button or the inline issue create functionality).

      However, Issues cannot be created via the REST API or via the "clone" button in the GUI. The workflow permissions are only being ignored when creating new issues in the GUI.

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

              359815908a67 Oleksandr Monakhov
              sutecht Seth Utecht (Inactive)
              Votes:
              21 Vote for this issue
              Watchers:
              27 Start watching this issue

                Created:
                Updated:
                Resolved: