nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Permissions for editing JMWE configuration

Zoltán Lehóczky

I'd like certain team members of ours to be able to edit global JMWE configuration (under Jira settings -> Apps), specifically, scheduled and event-based actions. Ideally, they'd be able to edit only those actions that they've created (i.e. an "edit own" permission) but it's also OK if they can edit all.

Can I somehow set up access control like this, without making them global Jira administrators?

Thank you!

Accepted answers

David Fischer

Hi @Zoltán Lehóczky ,

unfortunately, that isn't possible, for security reasons. Once you are able to edit Actions, you are basically able to do anything that the Jira REST API offers, by using the callJira Nunjucks filter. This essentially gives you admin powers, and therefore we need to restrict that power to official Jira admins.

All comments

David Fischer

Hi @Zoltán Lehóczky ,

Zoltán Lehóczky

I see, thank you.

Zoltán Lehóczky

Actually, isn't a JMWE action only as powerful as the user account executing it? In some cases one can also select whether to run it as the current user, a selected user, or the add-on user. Because it would be possible to restrict non-administrator users to only be able to run these as their own user, thus preventing access elevation?

David Fischer

Well, not really. Even when you select "run as" to run a post-function, it only impacts certain calls to Jira. Most of the calls have to be made "as the app user". And in particular, Nunjucks templates and their filters run as the app user. And of course they can be run by clicking on "Test Nunjucks Template", they don't even need to be part of a workflow post-function.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

jira-software

jira-software-cloud

addon-com.innovalog.jmwe.jira-misc-workflow-ex