Community
Q&A
Jira
Questions
Can jira-administrators access project details via REST API without "Browse Project" permission?

Can jira-administrators access project details via REST API without "Browse Project" permission?

The documentation states that the REST API "/rest/api/2/project/{projectIdOrKey}" requires the "Browse Projects" permission and mentions that a 404 error is returned when the user lacks permission to view it.

However, I've observed that if the user is a Jira administrator, the API returns a 200 status code with the correct response body, even if they do not have permission to browse the project. Is this behavior intended?

2 answers

Comments for this post are closed

Community moderators have prevented the ability to post new answers.

0 votes

Timepiece (formerly Time in Status)

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

0 votes

Strange!!! I know if it's getting authenticated with service account instead of human account then permission might be a concern

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Forums

Q&A

Community resources

Support

Top groups

Community resources

Support

Learn

Community resources

Support

Events

Community resources

Support

Can jira-administrators access project details via REST API without "Browse Project" permission?

2 answers

Comments for this post are closed

Was this helpful?

Thanks!

TAGS

Community showcase

Atlassian Community Events