Users Are Unable to Manage Sprints via REST API when they Do Not Have Admin Permissions

XMLWordPrintable

    • 9.12
    • Severity 3 - Minor

      Issue Summary

      After setting up an Incoming, External, Application link to Jira with System Admin permissions, non-administrator accounts are unable to Manage Sprints even if the Token Scope is System Admin and they have the Manage Sprints permission

      Steps to Reproduce

      1. Create an Application link in Jira
        1. External Application
        2. Incoming Application link Type
        3. Scopes = System Admin
      2. Setup an Oauth2 integration using the Key and Secret Provided
      3. Follow the Oauth2 authorization flow, and consent using an account that does not have System Admin permission, but does have the Manage Sprint permission
      4. Try to update a Sprint using API

      Expected Results

      The sprint is updated because the Token Endpoint Scope is System Admin and the consenting user has the Manage Sprint permission in Jira. 

      Actual Results

      The Sprint Cannot be edited by the User and the error below is returned

      {"errorMessages":["To update this sprint, you must either have the Manage Sprints or the Edit Sprints permission for all of the following projects: SCRUM."],"errors":{}}% 

      Workaround

      Follow the Oauth2 authorization flow as an account that has System Admin Permissions

              Assignee:
              Unassigned
              Reporter:
              Patrick Turbett
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: