Why do I keep getting warnings about sender not having MANAGE_WATCHER_LIST?

Scenario

  1. If a user adds others to the CC: of the inbound email, they will be (if matching a JIRA user) added as watchers, under the 'context' of the JIRA user that the inbound email is related to.

  2. If the Profile Configuration Issue section field 'Add Sender As Watcher' is set, JEMH will also try to add the current user, again under the context of the inbound mail related JIRA user.

Solution

By default, the MANAGE_WATCHER_LIST is given only to Administrators.

To resolve this, there are two choices:

  1. Deselect The Configuration Security section field Strict JIRA Permissions, meaning where such checks as this were made, they are now not.

  2. Keep Strict JIRA permissions enabled and add a group to the Permission Scheme such that, for example, 'non-jira-users' are then able to MANAGE_WATCHER lists.

Beware the Default Security Scheme

If Option 2 is selected, be aware that you have just given manage watchers privilege in all projects where that user has access. For security, you may want to create a new Permission Scheme for your 'email' inbound project(s).