How to restrict a ScriptRunner fragment to a specific user?

Kai Lamberson October 26, 2020

Hello,

I'm currently working on implementing a solution for a Jira environment, and need to restrict visibility to certain UI elements to only the global administrator.  We have additional admins that we do not want accessing that specific configuration screen.  How can I get the currentUser and basically say if the currentUser equals 'specific user', show the option, otherwise hide it?

Thanks!

1 answer

1 accepted

Suggest an answer

Log in or Sign up to answer
0 votes
Answer accepted
Peter-Dave Sheehan
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 26, 2020

Hi Kai

 

To get the current user, you would use the JiraAuthenticationContext

In a fragment condition, I would write it like this:

import com.atlassian.jira.component.ComponentAccessor
def currentUser = ComponentAccessor.jiraAuthenticationContext.loggedInUser
def approvedUsers = ['admin', 'another-admin']
currentUser in approvedUsers
Kai Lamberson October 26, 2020

Hey @Peter-Dave Sheehan

The issue is I'm trying to restrict it to just one user, so currentUser would need to equal a specific email or username.  We're trying to avoid using groups because the other admins could just add themselves to the group, thus gaining access to the configuration tool.  IS this possible?

Peter-Dave Sheehan
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 26, 2020

Yes, that's exactly what the snippet I shared does. Except I made a small mistake, the last line should be:

currentUser.name in approvedUsers

Just specify the username for the users you want to be able to see the option in the array approvedUsers.

You could just do 

currentuser.name  == 'user_a' //where user_a is a username that will be able to see the option

But generally, I like to future proof a little, what if you want a second user later? You could then write:

currentUser.name == 'user_a' || currentUser.name == 'user_b'

But that can get tedious. So instead, you define the list of users in a variable and check that the current user matches

def approvedUsers = ['user_a', 'user_b'] 
currentUser.name in approvedUsers

Now, if you only have 1 user, that's fine too. Just use an array of size 1

def approvedUser = ['user_a']
Kai Lamberson October 26, 2020

Ah, yes.  That makes sense, and works like a charm.

Appreciate the help.  I don't do these very often but this will definitely come in handy in the future.

TAGS
AUG Leaders

Atlassian Community Events