Fix schedule issues permissons
Users that do not have "Scheduled Issues" view permission on projects ( are not member of group that has been granted System --> Security --> Scheduled Issue ) can create scheduled issues themselves by going to Issues --> create Scheduled Issue
Comments (10)
-
-
reporter Note there are scalability issues how you have implemented the schedule permissions in general since you have chosen to use "Restriction" as opposed to "Authorize" which means you cannot effectively implement permission management on larger jira instances with users and groups in the thousand
-
Thank you for this feedback. We will consider your comments.
-
I agree with Johann. The permissions management need to be on authorize basis not restrict. Because exactly like Johann said, I would have to overhaul the whole permissions system we use. If you get to set who to authorise, I just specify the admins group and I am set. And someone who wants it open to anyone can just set it to be the users group.
As I said a couple of months back, fix this and we will buy this addon on the spot :)
-
IMHO, the restriction should also apply to limit access to the "schedule" option that is displayed within an issue. Right now it seems even though I can restrict who has access to the "schedule" tab of the project, that same person could create a new schedule with the Schedule button in an issue, potentially causign havoc.
Thanks!
-
Any updates on when this will be fixed?
-
Hi,
We are in the testing phase for the latest version of The Scheduler (3.2.4) which includes a fix for this bug. It should be released in this week.
-
Hi,
New version of The Scheduler (3.2.4) is now avalible on Marketplace. Please to try it and let us know if it is working properly now.
Regards, Bartosz Gilewski
-
- changed status to resolved
-
- edited description
- changed status to closed
- Log in to comment
Hi Jóhann, Thank you for reporting this bug. We will analyze it. Probably we will attach fix for the next release.
Regards