Restrict Data Access for Apps/Plugins

Question

Hi.

Trying to figure out if it is possible to restrict data access to App/plugins.

We have Scriptrunner and EazyBI installed.

Can we limit which projects these apps can access?

Example:

Project/Space "A" is public for all users. Project/Space "B" is restricted via special special user groups. User "X" has public access, and user "Y" has public and part of special user group to see "B".

When X goes to create a filter in Scriptrunner or Dashboard he/she must only see data from "A". When Y do the same he/she can see both A and B data in both apps.

Is this possible to do?

Gor Greyan · Accepted Answer

Hi @Ole Rosendal

Welcome to the Atlassian Community!

In general, marketplace apps like ScriptRunner or eazyBI respect Jira’s permission model, so they can only access data that the user is allowed to see.

The correct way to control access is via project permissions, issue security, and group membership — if user X can only see project A in Jira, the apps will follow that and only expose data from A.

Aron Gombas _Midori_ · Accepted Answer

The general answer is what @Gor Greyan wrote, but there is an additional layer: app access rules. Using these you can control which Jira spaces can be accessed by the apps themselves.

Ole Rosendal · Accepted Answer

Thank you.