...
The new Zephyr schema t is a very straightforward representation of the Zephyr’s Active Objects relational data model:
...
Security
| Note |
|---|
As many tables of the SQL+JQL schema is for Zephyr are mainly straightforward virtualization of the underlying schema table in the Jira database, the Zephyr permissions are ignored by default on those tables. |
You have to check manually in your queries by those permissions when the query is written.
Please read the Users documentation to learn how to check if the user belongs to a group and the user’s permissions (global, project, and issue levels).
Checking permissions and groups are easy in SQL+JQL and we provide some guidance in the Zephyr Examples section.
Ignoring Zephyr permissions allows making Zephyr reports for the rest of the organization without requiring extra Jira configuration. But the responsibility of avoiding data leaks remains now on the trusted user writing the query.
...