How do you make a user group read only?

I wanted to make a user group for read only besides just the subversion control. Is there a quick and easy way to setup a read only user group without having to set the permissions level for each area? Or do you have to setup each area individually for a scheme and apply the scheme?

5 answers

1 accepted

This widget could not be displayed.
Boris Berenberg Community Champion Aug 20, 2012

Given the provided information, you will need to adjust your permission scheme. This should not be that hard since you can just add your read only users to a group, and then add the group to the right permissions. This way, you only need to add and remove people from the group at need. You will not need to adjust the schemes every time your userbase changes.

Hi Boris,

I created a group called view only. I have also created a permissions scheme called view only. I have added the permissions scheme viewonly to the group view only. Within the view only persmissions scheme I have only given permissions to the group to the following:

Browse Projects

View Read-Only Workflow

But the users are still able to comment, edit and all of the normal functionality. How do I make it so they can only view the issues, and not assign anything.

Best,

Michael

Boris Berenberg Community Champion Aug 20, 2012

Hey Mike,

I realize I should have found this earlier. Take a look at: https://confluence.atlassian.com/display/JIRAKB/How+to+make+a+Read-Only+user+through+permissions+and+workflow+conditions

Let me know if you have any questions.

Cheers,
Boris

Hi Boris,

The users are only part of the view only group, with the view only permissions scheme. The only other group they are part of is the jira-users group which I was under the impression they had to be to log in. Do I need to remove the users from the jira-users group? I tried this earlier and the users were unable to log in.

Best,

Mike

Boris Berenberg Community Champion Aug 20, 2012

Hey Mike,

Does the user have membership in any other groups?

Bassicaly the user needs to be a member of Group A and only Group A, Group A needs to have read only permissions in Scheme A, Group A should be a part of the jira-users permission.

Cheers,
Boris

Hi Boris,

I have completed steps 1 & 2. When it gets to step 3 I am a little lost. Steps 3-6 seem to focus on adding more access and I just want to make sure they can read the issues only, not comment or edit the issues. I have tested this with a test account and the users are still able to edit, comment and assign with just the Browse Projects in the View only permissions scheme. I am not sure what I am missing to only allow them to read data.

Best,

Michael

Thank you for clarifying Boris. I have removed these users from the jira-users group. How do I give the view only users the JIRA Users Permission? I do not see that in the permissions scheme. Sorry if I am missing something. This is my first configuration.

Boris Berenberg Community Champion Aug 21, 2012

Yes, you need to remove the users from the jira-users GROUP, and then take your read only group and give it the JIRA Users PERMISSION.

Cheers,
Boris

Boris Berenberg Community Champion Aug 21, 2012

What version are you on?

Cheers,
Boris

Boris Berenberg Community Champion Aug 23, 2012

here you go:

Thanks Boris, I'll give this a try! =) You Rock!

Under "JIRA Users" the "jira-viewonly" group is now included. They are not included in any other global permissions group.

On my Permission Schemes I have included the "jira-viewonly" group to the "Browse Projects" project permissions only.

The user is able to log in to JIRA but still cannot see the issues I assign them with the following error message.

"You do not have the permissions required to browse any projects.

To change your permissions, please contact your JIRA administrators. "

They can however view the filters.

Boris Berenberg Community Champion Aug 23, 2012

Hey Mike,

This means that the permission scheme which grants that permission has not been asigned to the project where you want them to view the issue.

Cheers,
Boris

Cool I'll add that. Thanks again Boris, you were a tremendous help for a newbie =)

Boris Berenberg Community Champion Aug 23, 2012

Hey Mike,

Glad I could help. Once you have verified that it is working, please mark this as the answer. When other people run into the same issue, this will make it easier for them to find how to solve it.

Also, I highly encourage you to take a look at: http://www.atlassian.com/software/university/overview which is our training program. This will help you get up to speed on how to use and administer JIRA.

Cheers,
Boris

Even with the ready only scheme, which appears to be working for the most part, are the users able to move the ticket through the workflow? IE, close the ticket, or move it forward or backward in the workflow?

Is there a way to prevent this also?

Boris Berenberg Community Champion Aug 24, 2012

If everything is configured correctly, they should not be able to move issues through a workflow. I would look further into your permission scheme and user configuration.

This widget could not be displayed.
Boris Berenberg Community Champion Aug 18, 2012

Hey Mike,

It would be helpful if you could provide a little context. What product are you using? JIRA? Confluence? Fisheye / Crucible? Also please let us know what version of the software it is.

Cheers,
Boris Berenberg
Atlassian Support - San Francisco
Enjoyed the support?! Tweet us! #atlassiansupport

This widget could not be displayed.

Sorry.

We are using JIRA with the Fisheye plugin. Version v5.0.6.

Thanks Boris!

This widget could not be displayed.

Hi guys, I know this is an old issue, but I wanted to confirm:

Do I have to make Workflow changes to create a read-only User Group, or should the changes to Global Permissions (ONLY JIRA Users) and Permission Scheme (ONLY Browse Projects) be sufficient enough to give people read-only access to issues?

Because unfortunately I'm seeing that a user in the new group still has permissions to Comment, Assign and other Actions.

This widget could not be displayed.

Hey - so I've set up a group that *only* has the following permissions:

Global: JIRA Users
Default Permission Scheme: Browse Projects

For different projects, the Comment button is unavailable. But for some transitions still show up, whereas for others they are not there. So do I need to look inside every workflow and add Permission Conditions all over the place? That sounds... not fun. :-/

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted yesterday in Jira

What modern development practices are at the heart of how your team delivers software?

Hey Community mates! Claire here from the Software Product Marketing team. We all know software development changes rapidly, and it's often tough to keep up. But from our research, we've found the h...

53 views 0 1
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you