Install prompt lists permissions the app does not appear to use, such as webhook or project manageme

What you are seeing

The install prompt lists permissions the app does not appear to use, such as webhook or project management scopes.

The Atlassian Marketplace review and install screen for Markdown for Jira by Capable, with a permissions section listing seven actions, data management and analytics sections, and a Start free trial b
The review and install step lists everything the app asks for before the trial starts.

#Why it happens

The app requests manage:jira-webhook, manage:jira-project and manage:jira-configuration at install even though the released Jira surfaces contain no webhook code path.


#What to do

Expect to see them in the scopes prompt. Raise it with Capable support if your review process requires narrower scopes.


#A few things that catch people out

  • The app requests manage:jira-webhook, manage:jira-project and manage:jira-configuration at install, which admins will see, although the released Jira surfaces contain no webhook code path.

  • Permission enforcement is app-managed, so newly requested permissions ship to all installs immediately and sit pending admin approval rather than blocking the install.

  • Only the upgrade event performs the registration on the Jira side.



Found it? Good.