Issues can be transitioned by all users, even though they don't have permission
Platform Notice: Cloud and Data Center - This article applies equally to both cloud and data center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Symptoms
All users can transition issues, even though they have not been given the permission to.
For example: All users can close issues, even if nobody has been given the "Close Issues" permission.
Cause
The workflow that is used for the Issue or Project does not have any Conditions configured.
Resolution
Go to JIRA Administration > Workflows.
Edit the workflow that is relevant to the project or issue type.
Make sure each transition has a Condition added, such as "Only users with Close Issues permission can execute this transition."
More detailed workflow information can be found on the Configuring Workflow page.
Was this helpful?