Users are able to create a issues in a project even they don't have create issue permission

[Adriano Rocha]

As per the project permission scheme only some roles, the project lead, two groups members and one Group custom field value can able to create issues in this project, and Project lead does not want new issues to be get created in the project so removed all the Roles from the project and only keep viewers role which users can only able to view the issues in that project but not able to create the same apart from the two Jira groups which only have jira-admins are part of it and project lead.

Looking at the permission helper it shows that the user does not have permission to create the issues but still users are able to create the new issues, what is the reason users still able to create the issues?

[Ravina · Accepted solution]

Hi @Adriano Rocha This is a known issue from the Atlassian for the create issue permission having Group custom field value irrespective of the permissions users can able to create the issues in the project,

Please check the below ticket from Atlassian for more details

https://jira.atlassian.com/browse/JRASERVER-26659

You can either remove this field from the permission scheme if possible or if the permission scheme is shared with other projects, switch to the other permission scheme where this field is not in the Create issue permission.

Thanks

Ravina

[Adriano Rocha]

Thanks for the reply @Ravina I have switched the permission scheme to other read-only permission scheme that does not have Group custom field value field in Create Issue