Workflow conditions

Question

What am I miss understanding about transitions.

It appears that in order for a user to change an issues status, they must have the "Transition Issue" permission. For the most part everyone in my project should be able to change statuses. However, there are one or two transitions that I only want my admin team to be able to use. I added my admins to a group and added a condition to the transition such that "only users in group" <group name> "can execute the transition".

The user I'm testing this with are in the the groups "jira-software-users" which has the "Transition Issue" permission and they are also in "beta test" which the transition condition is set for.

Despite all these settings all users in the "jira-software-users" group are able to move between all statuses. What am I doing wrong?

Stefan Stadler · Answer

Hi @Anthony Bustamante

I would like to suggest not to use groups but instead switch to use Project Roles. This has several advantages:

- you can give permissions to different people in different projects and still use the same workflow

- it is easier to control as you can change settings from inside Jira (groups are often based on some kind of LDAP)

Here is how you can change the setting:

1. Create the needed project roles under Administration > System > Project Roles. From your description, I would assume it is something like "Project Admin" and "Project User"

2. Add the roles to the Project. Therefore, open the Project configuration page and navigate to "Users and Roles". You can map users and groups to the roles. From your description, I would add "jira-software-users" to "Project User" role and explicitly add the admin team to the "Project Admin" role. If you already have a group for them, you can also add the group here.

3. You can now modify the workflow and add conditions to your one or two transitions. There should be a condition named "User Is In Project Role". Here you can add the "Project Admin" role, which restricts the transition to all project admins only.

Hope this helps!

Stefan

Trudy P Claspill · Answer

Hello @Anthony Bustamante

Welcome to the Atlassian community.

Can you share a screen image of your workflow diagram and point out the transition you have modified?

Are you trying to prevent users from transitioning between two specific Statuses, or are you trying to prevent users from transitioning to a specific status from all other statuses?

John Funk · Answer

Hi Anthony - Welcome to the Atlassian Community!

You should not use jira-software-users for the Transition Issue permission if you want to control who can do it. I suggest you link that permission to a Project Role and not a group. Then you can control who is in that project role and therefore who can move it.

Another way to handle it would be to just allow users in a project role the permission to execute that transition.