CodeBarrel - Automation for JIRA - disable edits by project admins?

[Andrei [errno]]

am I right to assume that disabling the module (in UPM):
Project automation (automation_project_admin) 

will prevent project admins from editing the automation rules? 

we have too many tinkerers/project admins who might start 'playing around' and might abuse the system. would like to open this plugin only to system admins for the rollout time. 

thanks!

[Roman Smatana]

Hi Andreas, ups, that's nice. Thanks for navigating me there.

[Roman Smatana]

Hi Andreas,

Thanks for implementing. What version of plugin ? we use: 3.3.12 . I presume latest one? Many thanks

[andreas]

Hi Roman,

We implemented this quite a while ago in 2.1.2. Your version should definitely have this already in the global admin section:

Cheers,

  Andreas

[Roman Smatana]

Hi ,

we faced the same problem as any large company - higher probability of project admin fools in it. So we resolved it by hidding the element in banner with :

<style>
#automation_project_admin{display:none;}
</style>

and implement the automation rules on request.

@Andreas: go ahead and implement simple permission model here. Thank

s

[andreas]

@Roman Smatana https://codebarrel.atlassian.net/browse/AUT-75 has now been implemented to the point where global admins can configure access only for certain project admins (using group membership) in the global admin 'Automation rules' section.

[andreas]

Hi there!

Yes that is correct - to some degree .  It will hide the link in project admin.  Please note however that this is really only security by obscurity.  In other words if a crafty project admin knows the URL of the automation admin page, or can send requests directly the the REST API they'll still be able to create/edit rules.

To solve this properly we need to implement https://codebarrel.atlassian.net/browse/AUT-75 (an actual configuration UI allowing you to define fine grained access and security checks for project admins).

Cheers,

  Andreas