How do you make a user group read only?

[mtakata]

I wanted to make a user group for read only besides just the subversion control. Is there a quick and easy way to setup a read only user group without having to set the permissions level for each area? Or do you have to setup each area individually for a scheme and apply the scheme?

[Boris Berenberg · Accepted solution]

Given the provided information, you will need to adjust your permission scheme. This should not be that hard since you can just add your read only users to a group, and then add the group to the right permissions. This way, you only need to add and remove people from the group at need. You will not need to adjust the schemes every time your userbase changes.

[mtakata]

Hi Boris,

I created a group called view only. I have also created a permissions scheme called view only. I have added the permissions scheme viewonly to the group view only. Within the view only persmissions scheme I have only given permissions to the group to the following:

Browse Projects

View Read-Only Workflow

But the users are still able to comment, edit and all of the normal functionality. How do I make it so they can only view the issues, and not assign anything.

Best,

Michael

[Boris Berenberg]

Hey Mike,

I realize I should have found this earlier. Take a look at: https://confluence.atlassian.com/display/JIRAKB/How+to+make+a+Read-Only+user+through+permissions+and+workflow+conditions

Let me know if you have any questions.

Cheers,
Boris

[mtakata]

Hi Boris,

The users are only part of the view only group, with the view only permissions scheme. The only other group they are part of is the jira-users group which I was under the impression they had to be to log in. Do I need to remove the users from the jira-users group? I tried this earlier and the users were unable to log in.

Best,

Mike

[Boris Berenberg]

Hey Mike,

Does the user have membership in any other groups?

Bassicaly the user needs to be a member of Group A and only Group A, Group A needs to have read only permissions in Scheme A, Group A should be a part of the jira-users permission.

Cheers,
Boris

[mtakata]

Hi Boris,

I have completed steps 1 & 2. When it gets to step 3 I am a little lost. Steps 3-6 seem to focus on adding more access and I just want to make sure they can read the issues only, not comment or edit the issues. I have tested this with a test account and the users are still able to edit, comment and assign with just the Browse Projects in the View only permissions scheme. I am not sure what I am missing to only allow them to read data.

Best,

Michael

[mtakata]

Thank you for clarifying Boris. I have removed these users from the jira-users group. How do I give the view only users the JIRA Users Permission? I do not see that in the permissions scheme. Sorry if I am missing something. This is my first configuration.

[Boris Berenberg]

Yes, you need to remove the users from the jira-users GROUP, and then take your read only group and give it the JIRA Users PERMISSION.

Cheers,
Boris

[mtakata]

Version v5.0.6.

[Boris Berenberg]

What version are you on?

Cheers,
Boris

[Boris Berenberg]

here you go:

[mtakata]

Thanks Boris, I'll give this a try! =) You Rock!

[mtakata]

Under "JIRA Users" the "jira-viewonly" group is now included. They are not included in any other global permissions group.

On my Permission Schemes I have included the "jira-viewonly" group to the "Browse Projects" project permissions only.

The user is able to log in to JIRA but still cannot see the issues I assign them with the following error message.

"You do not have the permissions required to browse any projects.

To change your permissions, please contact your JIRA administrators. "

They can however view the filters.

[Boris Berenberg]

Hey Mike,

This means that the permission scheme which grants that permission has not been asigned to the project where you want them to view the issue.

Cheers,
Boris

[mtakata]

Cool I'll add that. Thanks again Boris, you were a tremendous help for a newbie =)

[Boris Berenberg]

Hey Mike,

Glad I could help. Once you have verified that it is working, please mark this as the answer. When other people run into the same issue, this will make it easier for them to find how to solve it.

Also, I highly encourage you to take a look at: http://www.atlassian.com/software/university/overview which is our training program. This will help you get up to speed on how to use and administer JIRA.

Cheers,
Boris

[mtakata]

Even with the ready only scheme, which appears to be working for the most part, are the users able to move the ticket through the workflow? IE, close the ticket, or move it forward or backward in the workflow?

Is there a way to prevent this also?

[Boris Berenberg]

If everything is configured correctly, they should not be able to move issues through a workflow. I would look further into your permission scheme and user configuration.

[Darryl Lee]

Hey - so I've set up a group that *only* has the following permissions:

Global: JIRA Users
Default Permission Scheme: Browse Projects

For different projects, the Comment button is unavailable. But for some transitions still show up, whereas for others they are not there. So do I need to look inside every workflow and add Permission Conditions all over the place? That sounds... not fun. :-/

[Darryl Lee]

Hi guys, I know this is an old issue, but I wanted to confirm:

Do I have to make Workflow changes to create a read-only User Group, or should the changes to Global Permissions (ONLY JIRA Users) and Permission Scheme (ONLY Browse Projects) be sufficient enough to give people read-only access to issues?

Because unfortunately I'm seeing that a user in the new group still has permissions to Comment, Assign and other Actions.

[mtakata]

Sorry.

We are using JIRA with the Fisheye plugin. Version v5.0.6.

Thanks Boris!

[Boris Berenberg]

Hey Mike,

It would be helpful if you could provide a little context. What product are you using? JIRA? Confluence? Fisheye / Crucible? Also please let us know what version of the software it is.

Cheers,
Boris Berenberg
Atlassian Support - San Francisco
Enjoyed the support?! Tweet us! #atlassiansupport