Yes, it's a bit of a flaw that is fixed by Atlassian adding a default "must have a generic transition-issue permission" explicit in the permission schemes - but you'll need JIRA 6.2 or above, if I remember right.
Otherwise, no, there's no protection, and anyone can use a transition unless you put at least one "condition" on it. I'm afraid you need to edit all your workflows and add conditions (even if it's just "is a JIRA user", I'd recommend putting a condition on every transition every time)
As a Belgian, beer-lover and home brewer, beer is one of my great passions. I love the fact that with just a few ingredients (usually just water, hop and malt) you can create so many different tastes...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
We're bringing product updates and pro tips on teamwork to ten cities around the world.Save your spot