Hi team,
Quick policy question before starting a Marketplace build.
Scenario:
A Forge app fetches data from Jira Software issues via api.asApp().requestJira() and displays a subset of that data inside a JSM customer portal module. The portal module uses unlicensedAccess: [customer] in the manifest. Portal customers never authenticate against Jira Software directly — all data is fetched server-side by the app’s service account and a controlled subset is returned to the UI.
The question:
Is this pattern — using asApp() to fetch Jira Software issue data and surface it to JSM portal customers — acceptable under Atlassian Marketplace guidelines? Or does exposing any Jira Software data to unlicensed portal users constitute license circumvention regardless of how it’s fetched?
Thanks in advance.