Users have the permissions to create filter subscriptions by adding groups.
Now if an employee wants to spam the entire company he can add the jira-users group to a filter subscription and spam everyone.
How can we avoid this scenario?
Can we prevent certain users from adding groups to subscriptions?
JIRA works on the allow, not restrict, model. You need to remove the 'bad' users from the group or role giving them permission. Or a couple days off without pay after a warning should fix the problem. The problem with attacking the issue with code, which you are trying to do, is it is a never ending problem. After this is handled something else will come up and you'll look for a code solution. I believe training and consequences to not following processes is a better long term solution.
If you spend enough time as a Jira admin - whether you are managing a single, mid-sized instance, a large enterprise one or juggling multiple instances at once - you will eventually find yourself in ...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
We're bringing product updates and pro tips on teamwork to ten cities around the world.Save your spot