Permissions model
What each viewer sees
Jira requests run as the current viewer.
Jira filters issue and field results before they reach the app.
The candidate’s two-account check returned an issue to its authorized author and omitted it for the restricted viewer.
Who controls the layout
Dashboard authors can change gadget configuration in edit mode.
Dashboard viewers receive the stored configuration as host context.
Jira controls dashboard permissions.
Requested access
The app requests one Jira scope: read:jira-work.
The app reads field metadata and selected issue fields.
Hiding or truncating a column is not an access control.