use standard permissions and permissions api; more tweaking
Got a suggestion or an issue?
Discuss it on the Atlassian Community or
visit Atlassian Support for other options.