Managing permissions

Custom fields permission schemes are created within Custom Fields Permission Schemes (JAKIS LINK?), which are then assigned to specific custom fields within each field configuration separately.

Secure Custom Fields Permission are able to be granted based on:

• Individual users
• Groups (including 'Anyone' group (e.g. to allow anonymous access))
• Project roles
• Issue roles such as 'Reporter', 'Project Lead' and 'Current Assignee'
• JIRA Permissions inherited from JIRA Permission Scheme
• A (multi-)user picker custom field.
• A (multi-)group picker custom field. This can either be an actual group picker custom field, or a (multi-)select-list whose values are group names.

What is a Permission Scheme?

A permission scheme is a set of user/group/role assignments for the field permissions listed above. Secure custom fields differ from any other custom field in having permission schemes. One permission scheme can be associated with multiple custom fields.

Why Permission Schemes?

Permission schemes prevent having to set up permissions individually for every custom field. Once a permission scheme is set up it can be applied to all custom fields that have the same type of access requirements.

Creating a Permission Scheme

1. Log in as a user with the 'JIRA Administrators' global permission.
2. Choose  > Issues. Select Custom Fields Permission Schemes to open the Permissions Schemes for Custom Fields page, which displays a list of all permission schemes in your JIRA system and the custom field that use each scheme.
    Tip Keyboard shortcut: 'g' + 'g' + start typing 'customs fields permission schemes'
3. Click the 'Add Scheme' link. 
4. In the 'Add Scheme' form, enter a name for the scheme, and a short description of the scheme. Click the 'Save' button
5. You will return to the 'Permissions Schemes for Custom Fields' page which now contains the newly added scheme.

 Adding Users, Groups or Roles to a Permission Scheme

1. Log in as a user with the 'JIRA Administrators' global permission.
2. Choose  > Issues. Select Custom Field Permission Schemes to open the Permissions Schemes for Custom Fieldspage, which displays a list of all permission schemes in your JIRA system and the custom fields that use each scheme
    Tip Keyboard shortcut: 'g' + 'g' + start typing 'custom field permission schemes'
   
3. Locate the permission scheme of interest and click its name (or click the 'Permissions' link in the 'Operations' column) to show a list of permissions.
   Screenshot: Custom Fields Permissions 
   
4. Click the 'Add' link in the 'Operations' column, which displays the 'Add Permission' page.
5. After selecting one or more permissions to add and who to add the selected permissions to, click the 'Add' button. The users/groups/roles will now be added to the selected permissions. Note that project roles are useful for defining specific team members for each project. Referencing project roles (rather than users or groups) in your permissions can help you minimise the number of permission schemes in your system.
   Screenshot: Add Users To Permissions 
   
   
6. Repeat the last 2 steps until all required users/groups/roles have been added to the permissions.

Deleting Users, Groups or Roles from a Custom Field Permission Scheme

1. Log in as a user with the JIRA Administrators global permission.
2. Choose  > Issues. Select Custom Field Permission Schemes to open the Custom Field Permission Schemes page, which displays a list of all permission schemes in your JIRA system and the custom fields that use each scheme.
    Tip Keyboard shortcut: g + g + start typing custom field permission schemes
3. Locate the permission scheme of interest and click its name (or click the Permissions link in the 'Operations' column) to show the list of 'Custom Field Permissions'.
4. Click the Delete link in the "Users / Groups / Roles" column next to the name of the user, group or project role you wish to delete.

Associating a Custom Field Permission Scheme with a Custom Field

1. Log in as a user with the JIRA Administrators global permission.
2. Choose  > Custom Fields.
    Tip Keyboard shortcut: g + g + start typing custom fields
3. Select the project of interest to open the Project Summary administration page for that project. See Defining a Project for more information.
4. On the lower right, in the Permissions section, click the name of the current scheme (e.g. 'Default Permission Scheme') to display the details of the project's current permission scheme.
5. Click the 'Actions' dropdown menu and choose 'Use a different scheme'.
6. On the 'Associate Permission Scheme to Project' page, which lists all available permission schemes, select the permission scheme you want to associate with the project.
7. Click the 'Associate' button to associate the project with the permission scheme.

Deleting a Permission Scheme

1. Log in as a user with the JIRA Administrators global permission.
2. Choose  > Issues. Select Custom Field Permission Schemes to open the Custoem Field Permission Schemes page, which displays a list of all permission schemes in your JIRA system and the custom fields that use each scheme.
    Tip: Keyboard shortcut: g + g + start typing custom field permission schemes
3. Click the Delete link (in the Operations column) for the scheme that you want to delete.
4. A confirmation screen will appear. To delete click Delete otherwise click Cancel.
5. The scheme will be deleted and all associated custom fields will be automatically associated with the Default Permission Scheme. (Note that you cannot delete the Default Custom Field Permission Scheme.)

Copying a Permission Scheme

1. Log in as a user with the JIRA Administrators global permission.
2. Choose  > Issues. Select Custom Fields Permission Schemes to open the Custom Field Permission Schemes page, which displays a list of all permission schemes in your JIRA system and the custom fields that use each scheme.
    Tip: Keyboard shortcut: g + g + start typing custom field permission schemes
3. Click the Copy link (in the Operations column) for the scheme that you want to copy.
4. A new scheme will be created with the same permissions and the same users/groups/roles assigned to them.