Restrict editing of work items to specific users, roles, or groups in Jira
プラットフォームについて: Cloud のみ - この記事は クラウド プラットフォームのアトラシアン製品に適用されます。
要約
Workflow properties in Jira allow for you to limit which users can edit work items once they reach certain statuses.
In our example, once work reaches the Complete status, we want to limit which users can make changes.
Restrict editing based on user's role, group membership, or ID
There are three workflow properties that you can choose from to limit editing capability. Each accepts an ID, respective to the property type you choose. They are:
jira.permission.edit.projectrole
jira.permission.edit.group
jira.permission.edit.user
Regardless of the property type you choose, the process for adding the property is the same:
Set workflow property to restrict editing
- Visit your project
- Select Project settings
- [ワークフロー] を選択します。
- Select Edit workflow for the relevant workflow based on work item type
- Choose the Diagram editor, then select the status where you wish to restrict editing
- In our example, we select the Complete status
- Select Properties
- Property key:
jira.issue.edit.<your_choice>
- Property value: <ID matching your property choice>
- Property key:
- Select Add
- Return to the workflow editor and select Publish Draft
After publishing, only users that match your chosen to the project role, group, or single user ID can edit work items in the Complete status.
Other users will receive an error message if they attempt any edits, and the change won't be saved.
Retrieve IDs needed to set workflow properties
If you don't have the respective IDs readily available, they can be retrieved easily.
Retrieve project role ID
From inside Jira:
- Visit
Settings > System
- Select Project roles
- Select View usage for your chosen project role
- In your browser's address bar, the project role ID will be listed
- For example:
https://<your_site>.atlassian.net/secure/project/ViewProjectRoleUsage.jspa?id=<project_role_id>
- For example:
Retrieve group ID
- Visit admin.atlassian.com
- Choose your Organization if you have more than one
- Select Directory
- Select Groups
- Choose the group you'd like to have editing capabilities
- In your browser's address bar, the group ID will be listed
- For example:
https://admin.atlassian.com/o/<org_id>/groups/<group_id>
- You can ignore the organization ID for the purposes of this article
- For example:
Retrieve individual user ID
- Visit admin.atlassian.com
- Choose your Organization if you have more than one
- Select Directory
- Select Users
- Search or scroll to find the user and select the linked text for their name
- In your browser's address bar, the user's ID will be listed
- For example:
https://admin.atlassian.com/o/<org_id>/users/<user_id>
- For example:
Allow for multiple project roles, groups, or users to edit
If we want to allow multiple sets of users to be able to edit work items in a given status, we need to add multiple properties.
For example, if we want two project roles, we'd use these two properties:
- Property 1:
- Property key =
jira.permission.edit.projectrole
- Property value = <project_role_1_ID>
- Property key =
- Property 2:
- Property key =
jira.permission.edit.projectrole.2
- Property value = <project_role_2_ID>
- Property key =
- Property 1: