Does this plugin ignore user-based permissions? Despite the user needing to authenticate to Jira to add a new tab into a channel, it looks like once they do that every user can see every filter and run every query, even if they don't have permission to the projects in Jira. This seems like a deal-breaker unless I am missing something?