Project permissions group any coincidences

[João Romão]

Dear all,

I have groups created and I was assigning permissions by group. But then I decide to clean the groups that were defaulted by the app leaving only 15 groups.

Now on the permissions I can't add them anymore by group.

It says there are any coincidences.

Can you help?

[Joe Pitt]

I suggest you change your permission model. 

First, by default JIRA has a horrible permission scheme that violates security best practices by allowing everyone that can logon to do just about everything.

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (see Global permissions to see the "can use" groups and admin groups).  This is where users are getting the access from.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

This may be a big effort, but it will pay off down the road by making it easy to control access.

Most of the 'old timers' use project roles. It meets the best practice for security and gives complete control to the project lead for access to their project. JIRA comes with many project roles, but you can add more if you have a special need.

[João Romão]

Thank you for the reply. I believe I expressed myself wrong.

On the premission scheme, when editing premissions and try to add groups it doesn't allow me to select a group. Previous it showed a drop down list with all groups available to give permissions and now appears empty.

I think the only thing I did was deleting some groups that we weren't using.

[Vasiliy Zverev]

Dear Joao!

Does it mean that you can not add some group to permission scheme?

[João Romão]

Dear Vasiliy,

I can't pick a group to assign anymore. Previous it appeared all the groups available but now none. It is like I have no groups on administration page. It is happening for all administrators and projects.