docs(jira): clarify scope vs project-permissions and drop no-op proje…

[woywro]

…ct-member step

Summary by CodeRabbit

• Documentation
  • Updated Jira integration setup instructions with enhanced guidance on API token scope configuration and permission verification.
  • Revised configuration capture steps for improved clarity.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ai-workflow-app	Building		May 11, 2026 8:03pm

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: a8944175-f7c9-462f-a3ef-28a3bfc92088

📥 Commits

Reviewing files that changed from the base of the PR and between 92a887c and 9668845.

📒 Files selected for processing (1)

• SETUP.md

---

📝 Walkthrough

Walkthrough

The SETUP.md file was updated to clarify the Jira service-account setup workflow. The guide now explicitly covers classic API token scope selection (read:jira-work and write:jira-work), adds security warnings about the interaction between token scopes and Jira permission schemes, and restates the configuration values required before webhook setup.

Changes

Jira Setup Documentation Update

Layer / File(s)

Summary

API Token Generation & Configuration Flow SETUP.md

Added "Generate a scoped API token" subsection covering classic scope selection and scope-to-permissions distinction. Expanded warnings clarify that API token scopes do not restrict Jira project permissions; service accounts must be checked/adjusted in jira-users permissions to remain restricted from destructive actions. Updated "Capture the rest of the config" checklist to restate base URL, project key, board columns, and proceed to webhook secret generation.

🎯 1 (Trivial) | ⏱️ ~3 minutes

🐰 Token scopes now dance with permissions in sync,
No destructive actions allowed by a security link,
The setup flows clearer, the warnings ring true,
A service account safely hemmed in by the crew!

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dev

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}