User unable to create subtask even if validator is not present

[Andrea Ravera]

Hello,

this is my situation:

- I've two group of user:

Group A: can create task and sub-task

Group B: can create only subtask on existing task

Since no create sub task permission is possible in JIRA I'm trying following workaround:

- Give Create Issue permission only to Group A

- Using standard workflow for Task where on Create transition there is a validator checking that user has "Create Issue" permission

- I've created a copy of this workflow, removed the validator on "Create issue" permission and assigned the workflow only to sub-task issue type.

What I was expecting is that user belonging to group B can't create taskbecause they haven't right permission, but they can create sub-task because validator in not present in the subtask workflow.

That solution is not working, Group B users can't create task and subtask.

Any suggestion? I'm misunderstanding how validators work?

If anyone has other solution to accomplish my requirement I'd be really grateful.

Andrea

[Prakhar Srivastav {Appfire}]

hi @Andrea Ravera

A better solution will be to use jira workflow properties.

Here is the link to guide you :

https://confluence.atlassian.com/adminjiraserver073/workflow-properties-861253674.html

https://www.j-tricks.com/tutorials/permissions-based-on-workflow-status

Regards

Prakhar

[Andrea Ravera]

Thanks for the answer.

I tried to use this tricks but it seems not working (or I'm not configuring it well)

I have updated "Create issue" permission with Group-A and Group-B

In the main workflow Create transition, I set the property as follow:

Property Key: jira.permission.create.group

Preperty Value: Group-A

I've published workflow but user from Group-B is still able to create issue. 

Am I wrong?

Thanks

[Andrea Ravera]

reading some comments below the article i found out taht this properties don't work in Create transition.

I'm still investigating for a workaround

[Prakhar Srivastav {Appfire}]

@Andrea Ravera

Ok.

If you don't mind writing small groovy script then you can use this free add-on and write script for validator where you check the group of the user.

https://marketplace.atlassian.com/apps/292/jira-misc-workflow-extensions?hosting=server&tab=overview

You can use script runner also. If you have it on your instance.

JIRA Suite Utilities is another add-on which has built in validator for checking user's group. Although it is paid but you can at least evaluate if that works.

https://marketplace.atlassian.com/apps/5048/jsu-suite-utilities-for-jira?hosting=server&tab=overview

Regards

Prakhar