It would be useful to define a global permission that would allow a user or group access to read ALL statuses via the API. Currently, only statuses that the calling user has access can be read via REST via the API calls

• GET /rest/api/2/status (returns a list of all statuses)
  and/or
• GET /rest/api/2/project/{projectIdOrKey}/statuses (returns all statuses in a certain project)

However, statuses are only returned that the user has permission to. This is defined by the "Browse Projects" permission.

Currently, a list of all statuses is only available by:

• Adding the calling user or group to each permission scheme (in an enterprise Jira environment, hundreds may be present, there therefore cumbersome to edit)
  or
• Directly read the statuses from the database using sql:

  SELECT id, sequence, pname, description, iconurl, statuscategory FROM issuestatus;