Security features that we have looked at up until now are not applied to workflows. When securing your JIRA, you will also need to consider who will be allowed to perform certain workflow transitions. For example, only users in the managers' group will be able to execute the Authorize transition on issues. For you to enforce security on workflows, you will have to set it on each transition you have, by adding workflow conditions. Please refer to Chapter 6, which discusses workflows and conditions in more detail.