Today we did some maintanance on our Jira Site and noticed something weird: A regular user added new Statuses
My theory: The "Edit Workflow" Permission has nothing to do with the ability to add statuses to a Simplified Workflow?
Is that correct?
If so:
Hi @Rebekka Heilmann _viadee_ ,
Those are great questions and quite niche, to some extent. Simplified workflows are those with global transitions allowing transitions from any status into any other status of the workflow. Adding to that they are only used in a single space creates the situation where non admin users do get power to manipulate the workflow.
Such workflows can only be created by Administrators and it usually happens by using an Atlassian template rather than creating a space with shared configuration.
Unfortunately, you cannot disable that. If you don't have too many admins or you know who they are, the best you can do is develop some governance and working agreements on the topic.
Finding all simplified workflows is not going to be straightforward, but they initially get created with the keyword Simplified Workflow for ... in the workflow title. As long as people don't rename them or create copies under different names, you should have a good starting point. That, or having a reference to the space they were created for may also be a pointer towards candidates. As soon as workflows are shared with more than one space, they also do not allow direct editing by non admin users anymore.
Hope this helps!
Yes, and...to the suggestions from @Walter Buggenhout there are several open suggestions in JAC around this topic to help manage the simplified workflows better for admins...although some of them are quite old:
Kind regards,
Bill
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
What I find really confusing is that there is a specific permission for Editing Workflows, but with the Simplified WF Board/Space Admins can add Statuses regardless?!
You both think that's the cause and expected behaviour?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.