Default condition in module

Jira Development Jira Cloud
1

Hi everyone,

We were wondering if there is any default validation of the type of users who can access to Configure Page module (eg, only those included in the site-admin group), before adding conditions.

Thanks in advance!

1 Like
2

Hi @andrea,

Yes, only Jira administrators will be able to access Configure Page modules because these pages are served under the administration area of Jira.

Regards,
Dugald

3

Thanks @dmorrow for the reply.

So what would be the permission that is doing that validation? because we want to hide the button to access the settings screen that we have associated with that module, but when checking the ADMINISTER permissions of the users who can see it and have access to it, ‘havePermissions’ is false.

08
082272×302 94.5 KB

BR,
Andrea

1 Like
4

Hi Andrea,

I’m unclear on how you are checking the permissions and which button you are referring to. Could you please provide details steps to reproduce this.

Regards,
Dugald

5

Hello!
Thanks for your help!

Our app has a “configurePage” mapping so that when you click on the CONFIG button, a request to:
“https://OUR_SERVER/plugins/servlet/ac/PRODUCT_KEY/CONFIG_KEY”
is sent and it resolves our rest api endpoint:
“OUR_SERVER/
/jira/config”

This happens when the user has access on the site and has the TRUSTED role.
BUT, when the user has just BASIC role, this mechanism simply doesn’t work - what is ok -, and the /jira/config endpoint is not called. So, we want to hide the CONFIG button for this type of users.

How do we know if a user doesn’t have TRUSTED access role and we have to hide the button?
We tried with the permissions rest API in :https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-permissions/#api-rest-api-3-permissions-get
but we get the same results for every user, so this is not useful.

Any tips? How do we get the right permissions?

Regards,
Hugo

1 Like
6

Hi @dmorrow,
my mate Hugo provided more details about it. Let us know if something is unclear.

BR,
Andrea

7

Hi, the API you have used returns all the possible permissions that exists in Jira. The API to check user’s permission is https://developer.atlassian.com/cloud/jira/platform/rest/v3/api-group-permissions/#api-rest-api-3-permissions-check-post. We are also working on [ACJIRA-2177] - Ecosystem Jira so soon it will be possible for connect app to request user’s permission without ADMIN scope.
regards,
Maciej

2 Likes