Tempo Timesheets: User can edit worklog without granted permission

[Konstantin Iakovlev]

Hello everyone.

Users with team permission "Manage Team Worklogs" have permission to edit all worklogs of team users in project via Tempo Timesheets without granted project permissions “Edit All Worklogs“ and “Edit Own Worklogs“.

How this can happen? I can’t find any information and it’s seems to be a bug.

Details are in attach - user can’t edit worklog in WorkLog tab, but can edit worklog in Tempo view.

Timesheets version - 15.2.0

Jira version - 8.13.18

[Susanne]

You might also want to take a look at the Tempo documentation for the Team Permissions: 
https://help.tempo.io/timesheets-dc/latest/team-permissions-tempo-server

[Konstantin Iakovlev]

Hello Susanne!

The problem is that team permission "Manage Team Worklogs" gives user with this permission to create, edit and delete at once. But I need to restrict only editing permission for everyones including users with team permission "Manage Team Worklogs".
It would be great to split "Manage Team Worklogs" onto three separate permission: create, edit and delete.

[Susanne]

This can only be done by using the JIRA project permissions. 

Instead of giving team members the "Manage Team Worklogs" permission, you can give them the projects permissions to "Edit own worklogs" and/ or "Edit all worklogs" (similar with the Delete own/ Delete all worklogs) and the "View worklogs" permission. 

Please note that the Edit all, Delete all and View worklogs permission will also give users access to to worklogs that are not made by their team members.

[Vronik]

Hi,

Look at this, I can probably help you

https://community.atlassian.com/t5/Jira-Service-Management/Tempo-Restrict-users-from-editing-worklog-entries/qaq-p/1482370

[Konstantin Iakovlev]

Hello Vronik!

Unfortunately it doesn't help(