When using REST API, "Log Work for Others", "Edit Other User's Worklogs" permissions are not properly checked.
Description
Hello,
I'm contacting you regarding API permissions. According to documentation, to log work as other user, you have to have "Edit All Worklogs" permission in particular Project. So I think something is not quite right in our instance/version, because our Developer's user "AzureDevops" can log work as any of our Developer without proper permission. In "Edit All Worklogs" we have only "Administrator" project group and this group consist of jira-administrator. "AzureDevops" doesn't have this kind of permission, he has only jira-users and permission to browse/edit issue.
My question is, whether everything should works that way, or is something wrong ?
Let me know in case of any questions.
Thank you in advance.
Have a nice day ahead.
Cheers,
Damian
Environment
None
