Only Unscoped API Key Works for Jira Issue Routes

[Shaun Brazzoni]

This issue seems to exist on all routes, but my narrowed example is on this route:

/rest/api/3/issue/createmeta/{projectIdOrKey}/issuetypes

I can only use an unscoped key to access that route. If I use a scoped key I get the following error:

"{\"errorMessages\":[\"You cannot create issues in this project.\",\"You are not authorized to perform this operation. Please log in.\"],\"errors\":{}}"

I've created 4 keys with these permissions:

• read:jira-work (the only required classic permission defined here)
• every classic permission
• read:issue-meta:jira, read:avatar:jira, read:field-configuration:jira (the list of narrow permissions)
• write:jira-work, read:jira-work

Every key gives that same error. Am I missing something here?

Edit: This doesn't seem to be limited to Product Discovery. I get the same error when accessing a regular Jira project; I also get the same non-error using an unscoped key on that project.