removing role from resolve permission on project not affecting users from resolving

[Wu Liu]

This is happening on Jira version 4.3.3. We have a project where users assigned to a particular role are not supposed to be able to resolve issues any more, so we updated the project permissions to remove that role from the "Resolve Issues" setting. However, they're still able to resolve issues. We've tried restarting Jira, but that had no effect.

The users in question only have membership in two groups; one which is assigned to the role that no longer is able to resolve issues in this project, and the generic "jira-users" group that is not assigned any roles whatsoever in the project. The really odd thing about this is that we have a test instance of Jira that was cloned from the projection instance mid 2011 where the configuration works fine.

What else could be causing this to happen?

[Jobin Kuruvilla [Adaptavist] · Accepted solution]

Have you modified the permissions on the workflow transition by any chance?

[Wu Liu]

The workflow transitions to the resolved status don't have any conditions or validators set. I don't see any permissions listed for any of the transitions.

[Jobin Kuruvilla [Adaptavist]]

That explains it. Resolve Issue permission is used only if it is set as a condition. You should add that condition or else everyone will be able to resolve the issues.