Users have the permissions to create filter subscriptions by adding groups.
Now if an employee wants to spam the entire company he can add the jira-users group to a filter subscription and spam everyone.
How can we avoid this scenario?
Can we prevent certain users from adding groups to subscriptions?
JIRA works on the allow, not restrict, model. You need to remove the 'bad' users from the group or role giving them permission. Or a couple days off without pay after a warning should fix the problem. The problem with attacking the issue with code, which you are trying to do, is it is a never ending problem. After this is handled something else will come up and you'll look for a code solution. I believe training and consequences to not following processes is a better long term solution.
I have multiple projects that use variations of the same base workflow. The variations depend on the requirements of the project or issue type. The variations mostly come in the form of new statuses ...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events