Incoming mails from existing AD users are rejected in Jira 4.4.4

[Troels Frederiksen]

We have a problem with our incoming mail setup on our locally hosted Jira installation.

Emails from anonymous (AD-unknown users) are treated fine and an issue is created. But if a user that exists in the AD sends an email, the permissions are checked in jira and rejected if they are not member of the right group. That means that completely unknown users are treated better than our internal users here.

Is it possible to let Jira create the issue as anonymous, if the user don't have the permission to create issues?

Best regards
Troels Frederiksen

Berlingskemedia

[Peter Van de Voorde · Accepted solution]

If they are known in your system and they are allowed to send emails to Jira to create tickets, why don't you just add them to a group in jira called : email-users which has create issue rights but not the global permission 'Jira Users'. In this way they can create issues in those projects but they don't count toward your license and they can't log into Jira.

[Emre Toptancı _OBSS_]

I am in the same situation with JIRA 6.3. The problem is, some of the users that are expected to open tickets via e-mail are also users of other projects in my JIRA system, so I can not deny them login. I also can not grant them create issue permission on my project because there are other issue types in the project and they are not supposed to open tickets through JIRA. Any suggestions?

[Dennis Popov]

The solution apeard to be in somewhat different direction than i was digging.

The algorythm is following (if no changes were made previously to standard global permissions)

1. Create group "email-users"

2. Add all users that you would like to be able to creaete issues (in my case that was omg around 3300 users)

3. Go to project --> people (I'm on jira 4.4.4) --> add group "email-users" to project users group.

Dennis Popov

Berlingskemedia

[Dennis Popov]

OK I am checking this.

That menas that you have to create your own custom permissioon scheme with only one permissions - "Create issues". Where group = anyone.

But it seems like when you are associating this schema with project you can use only one permission schema. Have to investigate further.

Studying this one for now.

https://answers.atlassian.com/questions/168955/how-to-associate-permission-schemes-with-user-group

[Troels Frederiksen]

Thank you for your answers. I will try it out and close the question if it works!

[Timothy]

The direct answer is no. The permission is checked and the error is thrown immediately. You might need to extend the mail handler if you want to create it anonymously.