CodeBarrel - Automation for JIRA - disable edits by project admins?

Andrei [errno]

am I right to assume that disabling the module (in UPM):
Project automation (automation_project_admin) 

will prevent project admins from editing the automation rules? 

we have too many tinkerers/project admins who might start 'playing around' and might abuse the system. would like to open this plugin only to system admins for the rollout time. 

thanks!

andreas_qezsu8

Hi there!

Yes that is correct - to some degree .  It will hide the link in project admin.  Please note however that this is really only security by obscurity.  In other words if a crafty project admin knows the URL of the automation admin page, or can send requests directly the the REST API they'll still be able to create/edit rules.

To solve this properly we need to implement https://codebarrel.atlassian.net/browse/AUT-75 (an actual configuration UI allowing you to define fine grained access and security checks for project admins).

Cheers,

  Andreas