Issue with automation linking erroneously

[Jon]

hi, we have an automation that is supposed to link issues from a different project and it seems to have worked incorrectly for the first time where it linked issues that dont seem that should have passed the rules. Did the system work incorrectly or is there something wrong in my automation. 

[Nic Brough -Adaptavist-]

Your workflow needs to have "conditions" added to it.

The "browse project" permission allows users to SEE issues. The workflow transitions you are seeing as soon as that is granted are appearing because they aren't protected. If you look at the default workflow, you'll see it's got conditions on every step, like "must be a user in the project" or "must have resolve or close permission". No conditions = anyone who can see the issue can use the transition.

I'd start simple, and add "must be a user in the project" to any transition without any conditions.