From https://confluence.atlassian.com/jira/linking-issues-185729497.html
bq. To create links on JIRA issues, you need to have the Link Issues permission in the project(s) to which the issues belong.
Apparently, that is not the way the UI works. It appears the user only needs the link issue permission on the source project. I don't really understand the logic for this behavior. It seems like the user can circumvent the permission by going to the other issue and starting the reversing link from there. The result being the same. This is wrong in my opinion!
Is my understanding correct? In any case, either the documentation should be changed to match the behavior or code changed to match the documentation.