Managing Project Permissions and Configuring Access in Jira

[ibuchanan]

@FarahHelali,

I wish more were documented about app access. As far as I can tell, this is the only Atlassian doc on the subject:

Manage your users’ third-party apps | Atlassian Support

Even if there were more/better docs, it is an area that is undergoing some change right now. There are a couple recent RFCs dealing with app permissions from various contexts:

RFC-9: Blocking Guest Access to Apps

RFCs are a way for Atlassian to share what we’re working on with our valued developer community. It’s a document for building shared understanding of a topic. It expresses a technical solution, but can also communicate how it should be built or even document standards. The most important aspect of an RFC is that a written specification facilitates feedback and drives consensus. It is not a tool for approving or committing to ideas, but more so a collaborative practice to shape an idea and to f…

RFC-14 App Access Rule

RFCs are a way for Atlassian to share what we’re working on with our valued developer community. It’s a document for building shared understanding of a topic. It expresses a technical solution, but can also communicate how it should be built or even document standards. The most important aspect of an RFC is that a written specification facilitates feedback and drives consensus. It is not a tool for approving or committing to ideas, but more so a collaborative practice to shape an idea and to f…

Perhaps the larger concept to understand is the overall shared responsibility model:

https://developer.atlassian.com/platform/forge/shared-responsibility-model/