Disallow JSM-Admins editing of Insight-Objects

[David Hämmerle]

In Insight under "Configure Object Schema" --> "Roles" it is possible to set permissions, quote:

> The following roles have permission to manage and view this object schema. Users can only view the object schema, Developers are able to create/edit objects and Managers can also modify.

I set myself as Manager/Developer, therefore only I should have the permission to edit objects. Yet Jira Service Management Admins can still do so.

[Leonie C. Breitmoser]

Hi guys,

this is sadly a "designed" permission issue that is annoying. Check out the permission matrix over here -> roles and permissions 

We stumbled about it as well and couldn't find a proper solution. If you ever find a workaround, please let me know. 

We also have trouble setting permissions on the attachments - when I got it right, it is not possible to restrict who can view/edit it. 

Cheers,

Leonie

[Dave Mathijs]

Hi @David Hämmerle ,

Permissions can be set individually per object type. Have you checked this?

[David Hämmerle]

Good tip, just looked it up and the Role configuration of all the objects is empty. So no users/groups are allowed there.

[Dave Mathijs]

Can you attach a screenshot of the current roles for the object schema?

[Björn Gullander]

Check who is in the Insight Adminstrators role in Insight->Configure->Roles

An Insight Administrator has the Object schema Manager role in ALL object schemas. 

And it is possible for a Jira admin to add himself to the Insight Administrators role, so you cannot be sure they will never be able to update a schema. 

Björn