Why are users are added in Project Developer Role

[Todd Palermo]

This has to be a setting that I have yet to find. All users that access a project are automatically added to the Developer Role for that Project. Currently I have users in a Group created in User Management and then I apply this Group to the User Role in a Project. When a user in that group accesses the Project, they are added individually to the Developer Role in that Project. Is there a setting or something to prevent this?

[Ravina · Accepted solution]

Hi Todd,

There is setting in global Project Roles where you can add groups or users as a default member for the Project Roles you want, if you have Jira admin access please check what configuration you have here and remove the setting if you want.

https://your-domain-url/secure/project/ViewProjectRoles.jspa

Thanks

Ravina

[Todd Palermo]

Hello @Ravina , it appears to be empty. All of my Project Roles are empty. Is there another spot to check?

[Ravina]

Hi Todd,

Thanks for checking that and confirming nothing is configured there, as you mention that user individually get added to the Developer role after the group is added in User roles and project is accessed by that user, then it should get logged into the Project audit log who added that user in Developer Role, you can in Project setting and audit log and check the Project Role changed entry to get who adding those users to Developer Role and check with that user if it's bot account user then and also check if any automation rule is configured or if you using scriptrunner plugin check if any listener script is running to add any of these users to these projects roles.

[Todd Palermo]

Hi @Ravina Thanks for your help. You are getting warmer... I see that an internal directory account is making a change, but usually this account is for Automation and Post Functions. I also see that my account is doing this also (I am a Jira and Project admin). It seems that my account mt20080 is making a change with several every second or so sometimes. Is there another location to check to see why this is happening??  

[Ravina]

Hi Todd,

Looking at the frequency of the execution there must be some automation rule or script is running for this based on the condition if user is part of Users roles that is what I thought, have you check automation rules and scripts configured for this? 

Apart from this not able to get anything else in my mind right now, but will update if I get something.

Thanks

Ravina

[Todd Palermo]

@Ravina Your Project Log information lead me to look over the System Log at this time and I noticed that this permissions change happens when we Import a CSV. I ran a test and removed all the Developers from the Project and then import 1 record with an assignee on the import. This assignee was given Developers permissions after the import. Is this a Jira bug?

[Todd Palermo]

@Ravina turns out this is a known problem.

[JRASERVER-64769] CSV Import will automatically add user to the Developer role whether it exists or not - Create and track feature requests for Atlassian products.

Thanks for your help Ravina!