What determines the visibility of boards in the "Get all boards" Jira Cloud Software REST API endpoint?

When using the “Get all boards” endpoint, I have noticed that my Connect App does not return all of the boards that are visible to me, a plain user.

Conversely, boards that are not visible to me (and definitely should not be) do appear in the returns for the connect app.

The docs say “This only includes boards that the user has permission to view.” so I am guessing this is a permissions issue.

What permission is determinative here? What permissions is the Connect App assumed to have?

When I query the /myself endpoint using the Connect App, I get the following, which is less privileges than I have as a plain user (ie. I am in several groups and roles). Is the Connect App a special “user”?

{
  "self": "https://{my-instance}.atlassian.net/rest/api/2/user?accountId=abc123",
  "accountId": "abc123",
  "emailAddress": "com.{my-instance}.jira.app@connect.atlassian.com",
  "avatarUrls": {
    "48x48": "https://secure.gravatar.com/avatar/946c196aaf115bc46646cefb4e9fa4d6?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FCC-4.png&size=48&s=48",
    "24x24": "https://secure.gravatar.com/avatar/946c196aaf115bc46646cefb4e9fa4d6?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FCC-4.png&size=24&s=24",
    "16x16": "https://secure.gravatar.com/avatar/946c196aaf115bc46646cefb4e9fa4d6?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FCC-4.png&size=16&s=16",
    "32x32": "https://secure.gravatar.com/avatar/946c196aaf115bc46646cefb4e9fa4d6?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FCC-4.png&size=32&s=32"
  },
  "displayName": "MyCo JIRA Connect",
  "active": true,
  "timeZone": "America/Los_Angeles",
  "locale": "en_US",
  "groups": {
    "size": 2,
    "items": [
      {
        "name": "jira-servicedesk-users",
        "self": "https://{my-instance}.atlassian.net/rest/api/2/group?groupname=jira-servicedesk-users"
      },
      {
        "name": "jira-users",
        "self": "https://{my-instance}.atlassian.net/rest/api/2/group?groupname=jira-users"
      }
    ]
  },
  "applicationRoles": {
    "size": 2,
    "items": [
      {
        "key": "jira-servicedesk",
        "name": "Jira Service Desk"
      },
      {
        "key": "jira-software",
        "name": "Jira Software"
      }
    ]
  },
  "expand": "groups,applicationRoles"
}
3 Likes