Restrict permission for user not in a group

[Deleted user]

Is it possible to denied a permission to everybody NOT in a group or NOT a reporter in a state property?

I want to restrict edit permission to only reporter at a certain step. And to only certain group in other state.

jira.permission.edit.(not reporter) = denied
jira.permission.edit.(not groupname) = denied

Also, Is there a permission to display? jira.permission.display.<macro> = denied?

Thank you

[Joe Pitt]

JIRA works on the allow permission model. Everyone is excluded to begin with and then you start adding permissions. I believe workflow permissions override the global so just give it to the reporter. I don't know if you can put multiple permissions.

[Deleted user]

Which value will you put to the property? jira.permission.edit.reporter = ???