When using REST API, "Log Work for Others", "Edit Other User's Worklogs" permissions are not properly checked.

Description

Hello,

I'm contacting you regarding API permissions. According to documentation, to log work as other user, you have to have "Edit All Worklogs" permission in particular Project. So I think something is not quite right in our instance/version, because our Developer's user "AzureDevops" can log work as any of our Developer without proper permission. In "Edit All Worklogs" we have only "Administrator" project group and this group consist of jira-administrator. "AzureDevops" doesn't have this kind of permission, he has only jira-users and permission to browse/edit issue.
My question is, whether everything should works that way, or is something wrong ?
Let me know in case of any questions.
Thank you in advance.

Have a nice day ahead.
Cheers,
Damian

Environment

None
Fixed

Priority

Major

Assignee

Deniz Oğuz

Reporter

Deniz Oğuz

Affects versions

None

Fix versions

Labels

None

Source

None

Jira Version

Database Type/Version

mssql

Browser Type/Version

All kinds of Internet browser
Configure