Can I disable impersonate User in Scriptrunner ("Switch to a different user")

[C]

For security reasons, we cannot allow users to be impersonated by our admins.   is there a way to disable the adaptvist scriptrunner's impersonate user feature ("Switch to a different user")? 

[Daniel Yelamos [Adaptavist]]

Hi Christian.

As far as I know, this is not possible yet. However, I believe there is an issue in our backlog, that I'm ashamed to say that I can't find :(

If I find the issue I will post it here so that you can follow up. If you want, open a support ticket in our portal to ask for the feature. 

Cheers!

Dyelamos

[C]

I have opened SRJSUP-4888 for support.

Jamie asked about adding an reference so it can be hidden by CSS in SRJIRA-2282 but it does not seem that there was more conversations on this ticket.

There is the feature request SRJIRA-587 for improving security / permissions.  However,  our security organization would like us to disable this feature because of the potential of abuse.

[Ecam Tox]

I too would very much like to show interest in this. My organisation will not purchase this plugin for our use because of the ability to impersonate A N Other user. It simply introduces Risks that the business is not willing to take.

Is there an update on a backlog ticket number I could follow/watch?

Thanks

Scott

[Daniel Yelamos [Adaptavist]]

Hi guys, I've brought this up again in my company. 

When I hear back from them I'll let you know.

Cheers!
DYelamos

[Daniel Yelamos [Adaptavist]]

So quick update from my team:

First of all, we've reopened:

https://productsupport.adaptavist.com/browse/SRJIRA-2282

We will be following up on ideas on how to properly do this, so if you want, login into our service desk and voice your concerns.

Second of all, I was asked to make an important point. Even though you can switch to another user with that script, every switch is logged in the audit log, and moreover, you cannot switch from admin to system admin.

Do say if I can be of anymore help.

Cheers!

Dyelamos

[Ecam Tox]

Thanks @Daniel Yelamos [Adaptavist]

From my first initial look it seems that jira-users can't access the page to use the Scriptrunner built in features anyway, is that correct, or have I missed something?

Thanks

Scott