Yes, it's a bit of a flaw that is fixed by Atlassian adding a default "must have a generic transition-issue permission" explicit in the permission schemes - but you'll need JIRA 6.2 or above, if I remember right.
Otherwise, no, there's no protection, and anyone can use a transition unless you put at least one "condition" on it. I'm afraid you need to edit all your workflows and add conditions (even if it's just "is a JIRA user", I'd recommend putting a condition on every transition every time)
...ollected feedback from users around the lack of shortcuts, and we’re here to address that: In next-gen projects, I miss the keyboard shortcuts badly. This is particularly true on the Board, but also i...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event