nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Project permissions

amit_bakst

Hello,

I would like to understand if when I grant permission to a group in Jira and in addition to the Project role does the user have to meet both of these conditions?

From what I have read and to the best of my knowledge only one of the options is needed. Is this a mistake?

As you can see in the attached picture I have a user in the test team but not in one of the listed Project roles.

Screen Shot 2022-06-02 at 11.55.39.png

Thanks in advance,

Amit

Accepted answers

Alex Koxaras -Relational-

Hi @amit_bakst

It's not wrong what you did. This will work perfectly fine. However Atlassian propose in project permissions to user project roles rather than group, only because a project administrator can grant membership to users and group he/she belongs to. If the project admin wants to grant a user special permissions he/she can grant a project role. But if the project admin isn't a jira admin, he/she can't add a new user to a group or playing around with group. He doesn't have the necessary permissions.

Hope it is clear. Let me know!

Alex

Nic Brough -Adaptavist-

Permissions in Jira are, well, permissive. If you match a rule that says "you can do X", then you can do X, it doesn't matter how many times you match.

The rule in your screenshot says

Role: Administrators
Role: atlassian-addons-project-role
Group: test group

If a user is in either role, or the test group, then they have access to the project. They only need to match one rule, Jira doesn't care if they match two or all three. It stops looking as soon as it finds the first match.

If you want to be 100% on best-practice and performance though, remove the test group from the permission scheme, add a new role for project access, grant it the permission and put the group into the role in the project.

All comments

Alex Koxaras -Relational-

Hi @amit_bakst

Hope it is clear. Let me know!

Alex

Nic Brough -Adaptavist-

Permissions in Jira are, well, permissive. If you match a rule that says "you can do X", then you can do X, it doesn't matter how many times you match.

The rule in your screenshot says

Role: Administrators
Role: atlassian-addons-project-role
Group: test group

amit_bakst

Hi @Alex Koxaras -Relational-

Yes, thank you!
I hope no more problems arise.
I would also like to know if I gave the user Comments Permissions to add comments why he can not mention people in the comment?

Thanks in advance,

Amit

Alex Koxaras -Relational-

In order to mention other people that user must have the global permission of "Browse users and groups".

amit_bakst

@Alex Koxaras -Relational- Thank you!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

jira-software

jira-software-cloud