Is it possible to restrict or hide users and project roles?

[Pavel Rusakov]

Hi!
I have a case then I want to add 3 access groups(view,edit,admin) to project. I don't want the administrators adding any people or groups.  Is it possible to restrict or hide users and project roles? Maybe need I use Scriptrunner? Is anybody resolved this case?

[Marc - Devoteam]

Hi @Pavel Rusakov 

Don't use project role in your permission scheme.

Base you permission scheme for the project on groups and or users, best practice use groups.

This will stop having people in roles to be able to grant permissions on a project

You will have to create the groups in Jira.

[Pavel Rusakov]

Yes! I do it. But, The Project Administrators can add someone with button "Add users to a role". I want to restrict or hide it. 

Or do you mean the  "/permissions" ? Add groups directly to /permissions and remove mapping with roles?

Do you know how I can hide it? Maybe scriprunner Fragments?

[Marc - Devoteam]

Hi @Pavel Rusakov 

Yes remove the role mapping the permission schemes.

The will make the "add user to a role" button useless, as no roles will be specified to permissions in the permission scheme

[Pavel Rusakov]

I have been found the solution with SR Fragments. I use "Hide system or plugin UI element" :

com.atlassian.jira.jira-project-config-plugin:view_project_roles 

with condition: 

import com.atlassian.jira.component.ComponentAccessor

def user = ComponentAccessor.jiraAuthenticationContext.loggedInUser

def groupManager = ComponentAccessor.groupManager

if (!groupManager.isUserInGroup(user, "jira-administrators")) {

return false

}

return true

[Marc - Devoteam]

HI @Pavel Rusakov 

Nice.

But I think to solution I provided can be used without a 3rd party app.

Yours is also nice, but it requires users to have script runner installed.