Permissions Not Restricted Correctly?

Question

Hi,

Thanks in advance for any help.

I have a Group, Customer_1.

I have a Permission Scheme, under which Customer_1 has the following permissions:

Browse Projects

Create Issues

Add Comments

Create Attachments

I have a project, we'll call Project_1. Project_1 has the permission scheme Customer_1.

I have a user, we'll call MyCustomer, who belongs to group jira-users and Customer_1.

MyCustomer is able to not only view and create issues (good!), but can transition issues through workflow (undesireable for me, but I'm unsure if this can be restricted) and also resolve/close issues (!).  I'm pretty sure I'm doing something wrong and this isn't a bug (because it would be a helluva bug), but what might that be?

My objective is to make customer logins so that they can view their issues (which I restrict with a security scheme that seems working), and add new issues, but not modify/close existing issues, see work-time allocated, anything like that.  Essentially a very boxed-in user.

What can I do?  Thank you!

John Miller19 · Answer

I did - what I'm saying is that these Groups explicitly to not have 'resolve' and 'close' permissions, and that the project in question has this permission scheme, so a user who is only a member of two groups, neither of which have resolve or close permissions, should not (as far as my understanding goes) be able to resolve or close issues.

I appreciate the link, but that's exactly the steps I followed and tried to outline above.  If I am misunderstanding, then my misunderstanding stems from the link, so additional detail would be appreciated.

Jobin Kuruvilla [Adaptavist] · Answer

Check out this page to see more on the project permissions. Resolve also give permission to set the Fix Version value on issues in addition to the workflow resolve.

John Miller19 · Answer

Thanks.  That looks really helpful.

However, if a Permission Scheme does not allow a particular Group 'resolve' and 'close' permissions, what else could it mean except to restrict users in that Group/Permission combo from not being able to do the workflow steps 'resolve' and 'close'?