Streek Project Permissions: Defaults for IST

Overview
Grants by Permission
Permissions by Grant

Overview

The following permission grants should be largely self-explanatory. For close readers, a few points of clarification follow:

Project leads (myproject-leads in this example) are always assigned membership in the corresponding developers group as well (myproject-developers in this example); persons assigned to the project leads role thus have both leads' and developers' permissions.
The project in the example is called "myproject". To transpose the example to another project, substitute the other project's name for "myproject" in the charts below. Permission grants to groups other than myproject-* are applied by default to all IST projects (with the exception of the ist-as-project-browsers group, as noted above).
This is an example of IST-AS project permissions. Projects based outside IST Application Services are identically templated, except that the ist-as-project-browsers group is omitted.
The ist-as-project-browsers group are the IST-AS director, her direct reports, and selected IST-AS "Level 3" managers.
The dbas group are staff in the IST-IS Database Services unit. These staff are given project permissions by default because they are regularly involved in resolving software development problems as they pertain to database issues.
The sys-admin group are staff in the IST-IS System Services unit. These staff are given project permissions by default because they are regularly involved in resolving software development problems as they pertain to web- or application-server host issues.
The streek-mentors group are selected members of the IST-AS Architecture Group, who serve as mentors both in the use of JIRA and in application development generally.

Grants by Permission

Permission	Description	Granted To
Administer Projects	Ability to administer a project in JIRA.	jira-administrators streek-mentors myproject-leads
Browse Projects	Ability to browse projects and the issues within them.	streek-mentors myproject-developers myproject-customers ist-as-project-browsers ist-production-control dbas sys-admins
View Version Control	Ability to view Version Control commit information for issues.	streek-mentors myproject-developers ist-production-control dbas sys-admins
Create Issues	Ability to create issues.	streek-mentors myproject-developers myproject-customers
Edit Issues	Ability to edit issues.	streek-mentors myproject-developers
Schedule Issues	Ability to set or edit an issue's due date.	streek-mentors myproject-leads
Move Issues	Ability to move issues between projects. Note the user can only move issues to a project he or she has create permission for.	myproject-leads jira-administrators streek-mentors
Assign Issues	Ability to assign issues to other people.	streek-mentors myproject-leads
Assignable User	Users with this permission may be assigned to issues.	streek-mentors myproject-developers myproject-customers ist-production-control dbas sys-admins
Resolve Issues	Ability to resolve and reopen issues. This includes the ability to set a fix version.	streek-mentors myproject-developers ist-production-control dbas sys-admins
Close Issues	Ability to close issues. Often useful where your developers resolve issues, and a QA department closes them.	streek-mentors myproject-leads
Modify Reporter	Ability to modify the reporter when creating or editing an issue.	streek-mentors myproject-leads
Delete Issues	Ability to delete issues, comments and attachments.	streek-mentors myproject-leads
Link Issues	Ability to link issues together and create linked issues. Only useful if issue linking is turned on.	streek-mentors myproject-developers ist-production-control dbas sys-admins
Set Issue Security	Ability to set the level of security on an issue so that only people in that security level can see the issue.	streek-mentors myproject-developers
View Voters and Watchers	Ability to view the voter and watcher list of an issue.	streek-mentors myproject-developers myproject-customers ist-production-control dbas sys-admins
Manage Watcher List	Ability to manage the watcher list of an issue.	streek-mentors myproject-developers myproject-customers ist-production-control dbas sys-admins
Add Comments	Ability to comment on issues.	streek-mentors myproject-developers myproject-customers ist-production-control dbas sys-admins
Edit All Comments	Ability to edit any comments, regardless of who added them.	This permission is not granted.
Edit Own Comments	Ability to edit one's own comments.	jira-users
Delete All Comments	Ability to delete any comments, regardless of who added them.	streek-mentors myproject-leads
Delete Own Comments	Ability to delete one's own comments.	This permission is not granted.
Create Attachments	Users with this permission may create attachments.	streek-mentors myproject-developers myproject-customers ist-production-control dbas sys-admins
Delete All Attachments	Ability to delete any attachments, regardless of who added them.	streek-mentors myproject-leads
Delete Own Attachments	Ability to delete one's own attachments.	This permission is not granted.
Work On Issues	Ability to log work done against an issue. Only useful if Time Tracking is turned on.	streek-mentors myproject-developers ist-production-control dbas sys-admins
Edit Own Worklogs	Ability to delete one's own worklogs.	This permission is not granted.
Edit All Worklogs	Ability to delete one's own worklogs.	This permission is not granted.
Delete Own Worklogs	Ability to delete one's own worklogs.	This permission is not granted.
Delete All Worklogs	Ability to delete one's own worklogs.	This permission is not granted.

Permissions by Grant

Granted To	Permission: Description
jira-administrators	Administer Projects: Ability to administer a project in JIRA. Move Issues: Ability to move issues between projects. Note the user can only move issues to a project he or she has create permission for.
streek-mentors	Administer Projects: Ability to administer a project in JIRA. Browse Projects: Ability to browse projects and the issues within them. View Version Control: Ability to view Version Control commit information for issues. Create Issues: Ability to create issues. Edit Issues: Ability to edit issues. Schedule Issues: Ability to set or edit an issue's due date. Move Issues: Ability to move issues between projects. Note the user can only move issues to a project he or she has create permission for. Assign Issues: Ability to assign issues to other people. Assignable User: Users with this permission may be assigned to issues. Resolve Issues: Ability to resolve and reopen issues. This includes the ability to set a fix version. Close Issues: Ability to close issues. Often useful where your developers resolve issues, and a QA department closes them. Modify Reporter: Ability to modify the reporter when creating or editing an issue. Delete Issues: Ability to delete issues, comments and attachments. Link Issues: Ability to link issues together and create linked issues. Only useful if issue linking is turned on. Set Issue Security: Ability to set the level of security on an issue so that only people in that security level can see the issue. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Delete All Comments: Ability to delete any comments, regardless of who added them. Create Attachments: Users with this permission may create attachments. Delete All Attachments: Ability to delete any attachments, regardless of who added them. Work On Issues: Ability to log work done against an issue. Only useful if Time Tracking is turned on.
myproject-leads	Administer Projects: Ability to administer a project in JIRA. Schedule Issues: Ability to set or edit an issue's due date. Move Issues: Ability to move issues between projects. Note the user can only move issues to a project he or she has create permission for. Assign Issues: Ability to assign issues to other people. Close Issues: Ability to close issues. Often useful where your developers resolve issues, and a QA department closes them. Modify Reporter: Ability to modify the reporter when creating or editing an issue. Delete Issues: Ability to delete issues, comments and attachments. Delete All Comments: Ability to delete any comments, regardless of who added them. Delete All Attachments: Ability to delete any attachments, regardless of who added them.
myproject-developers	Browse Projects: Ability to browse projects and the issues within them. View Version Control: Ability to view Version Control commit information for issues. Create Issues: Ability to create issues. Edit Issues: Ability to edit issues. Assignable User: Users with this permission may be assigned to issues. Resolve Issues: Ability to resolve and reopen issues. This includes the ability to set a fix version. Link Issues: Ability to link issues together and create linked issues. Only useful if issue linking is turned on. Set Issue Security: Ability to set the level of security on an issue so that only people in that security level can see the issue. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Create Attachments: Users with this permission may create attachments. Work On Issues: Ability to log work done against an issue. Only useful if Time Tracking is turned on.
myproject-customers	Browse Projects: Ability to browse projects and the issues within them. Create Issues: Ability to create issues. Assignable User: Users with this permission may be assigned to issues. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Create Attachments: Users with this permission may create attachments.
ist-as-project-browsers	Browse Projects: Ability to browse projects and the issues within them.
ist-production-control	Browse Projects: Ability to browse projects and the issues within them. View Version Control: Ability to view Version Control commit information for issues. Assignable User: Users with this permission may be assigned to issues. Resolve Issues: Ability to resolve and reopen issues. This includes the ability to set a fix version. Link Issues: Ability to link issues together and create linked issues. Only useful if issue linking is turned on. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Create Attachments: Users with this permission may create attachments. Work On Issues: Ability to log work done against an issue. Only useful if Time Tracking is turned on.
dbas	Browse Projects: Ability to browse projects and the issues within them. View Version Control: Ability to view Version Control commit information for issues. Assignable User: Users with this permission may be assigned to issues. Resolve Issues: Ability to resolve and reopen issues. This includes the ability to set a fix version. Link Issues: Ability to link issues together and create linked issues. Only useful if issue linking is turned on. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Create Attachments: Users with this permission may create attachments. Work On Issues: Ability to log work done against an issue. Only useful if Time Tracking is turned on.
sys-admins	Browse Projects: Ability to browse projects and the issues within them. View Version Control: Ability to view Version Control commit information for issues. Assignable User: Users with this permission may be assigned to issues. Resolve Issues: Ability to resolve and reopen issues. This includes the ability to set a fix version. Link Issues: Ability to link issues together and create linked issues. Only useful if issue linking is turned on. View Voters and Watchers: Ability to view the voter and watcher list of an issue. Manage Watcher List: Ability to manage the watcher list of an issue. Add Comments: Ability to comment on issues. Create Attachments: Users with this permission may create attachments. Work On Issues: Ability to log work done against an issue. Only useful if Time Tracking is turned on.
jira-users	Edit Own Comments: Ability to edit one's own comments.