gistfile1.txt

import com.atlassian.jira.ComponentManager
import com.atlassian.jira.ManagerFactory
import com.atlassian.jira.permission.PermissionSchemeManager
import com.atlassian.jira.scheme.SchemeEntity
import org.apache.log4j.Level
import org.apache.log4j.Logger
import org.ofbiz.core.entity.GenericValue
import static com.atlassian.jira.security.Permissions.VIEW_WORKFLOW_READONLY

Logger log = Logger.getLogger("OneOffAddViewWorkflowPermission");
log.setLevel(Level.DEBUG)

PermissionSchemeManager permissionSchemeManager = ComponentManager.getComponentInstanceOfType(PermissionSchemeManager.class)

permissionSchemeManager.getSchemes().each {GenericValue scheme ->
    if (ManagerFactory.getPermissionSchemeManager().getEntities(scheme, VIEW_WORKFLOW_READONLY, "group", null).isEmpty()) {
        log.debug("Modify scheme ${scheme.get('name')}".toString())

        try {
            SchemeEntity schemeEntity = new SchemeEntity("group", null, VIEW_WORKFLOW_READONLY);
            permissionSchemeManager.createSchemeEntity(scheme, schemeEntity)
        }
        catch (Exception e) {
            log.warn ("Error updating scheme: ${scheme.get('name')}".toString())
        }
    }
    else {
        log.debug("Scheme ${scheme.get('name')} already has an entry for this permission".toString())
    }
}