The security features we have looked at so far are not applied to workflows. When securing your Jira, you will also need to consider who will be allowed to perform certain workflow transitions. For example, only users in the managers group will be able to execute the authorize transition on issues. For you to enforce security on workflows, you will have to set it on each transition you have by adding workflow conditions. Refer to Chapter 7, Workflow and Business Process, which discusses workflows and conditions in more detail.