nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

ScriptRunner post-function Create Sub-task Permission question

John Benjamin

I'm running 6.0.2 of JIRA and using the ScriptRunner built-in script to create a sub-task as a post-function. Recently, the post-function stopped working and I traced it back to a permissions change I had made: I had removed the Anyone group from the Create Issues permission.

I thought the user that was initating the workflow transition became the Reporter for the sub-task and would therefore be the user account with the permissions.

Is there something else I'm missing here? Why does the create sub-task post-function require anonymous ability to create the issue?

Accepted answers

All comments

Vijay Khacharia

Hi John,

Thats strange. As I am using the same post-function and I dont have anonymous access to create the issue and it works perfectly well for me.

May be there is some error in logs that would help. Can you try to paste the logs here?

Vijay

JamieA

Yeah... I'm not sure you've reached the correct conclusion. Can you post any errors?

John Benjamin

I will switch it back and look for any errors when I run it again (couldn't find any from yesterday's run). I do see this in the stream when the subtasks were created it appears to be creating the links to the original parent under Anonymous. I'm creating three subtasks in the post-function.

John Benjamin

here is screenshot

John Benjamin

Attached is exercpt from Jira and Jira-Security logs from when I reran this morning...Error is

[onresolve.jira.groovy.GroovyFunctionPlugin] Error executing post-function
com.atlassian.jira.exception.CreateException: An unknown exception occured executing Validator com.atlassian.jira.workflow.validator.PermissionValidator@4fb5902c: root cause: java.lang.NullPointerException

I did confirm I was logged in (my USerID is OPR9465). We are using LDAP authentication...could that require anything unique?

(PermissionsQuestion.txt)

John Benjamin

Hi Vijay -- I posted the log results fromt his morning above. I agree it is strange behavior and is likely something I'm overlooking.

Vijay Khacharia

Hi John,

Is the transition itself is failing or just the sub-task creation?

Vijay.

John Benjamin

Just the sub-task...I tried the same with a non LDAP user with elevated permissions and it did create the sub-tasks sucessfully. I'll keep trying to isolate it...

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

addon-com.onresolve.jira.groovy.groovyrunner

jira-administration