I've a query regarding permissions for connect apps for JIRA.
JIRA exposes webhooks to provide project and issue related information to connect App that you install. Would this not provide security loophole where users of the app can access information about other project which he is not allowed to through connect app?
Please correct if my understanding is incorrect
Thanks,