Atlassian Goals and Projects Access Permissions Question

[QMSpot _ Patrick Gehlich]

Hello together :)
I read, that Goals and Projects are in the rollout stage: April-Mai

I really think, it´s one of the biggest features of Atlassian so far!
Congratulations to that.

But i´m a bit concerned about the security.
I want to invite a Guest/Stakeholder/External User to a project.
I also tried it with a goal. But the Goal app needs more time.

So i wanted to invite a guest to a Project.
But he does´nt get the invitation.

When i give the Guest User Access to the Projects App, he can see all Projects and archived Projects.
He also can create new Projects, or see COntent from our licensed Colleagues.

Will this be fixed? 
We really want to use this function to communicate on the CTO Level with our Customers.

Thanks a lot.

[Sean Perry]

If you want to share a single Project with a Guest User, the Project needs to be created as a Private Project. That will limit the visibility of the Guest User to that single Project. In order for that Project to be visible to internal users, you would need to add them as Followers to that Private Project., 

It is currently not possible to switch a project from Public to Private (or vice versa) once it has been created.

Hope this helps. 

[Arkadiusz Wroblewski]

Hello @QMSpot _ Patrick Gehlich 

Your concern is totally valid!

This isn't so much a bug as it is a limitation of how the permissions are currently designed. Right now, access is a mix of app-level settings and individual sharing, so if "automatic access" is enabled, things can become visible a lot faster than you'd like.

Because it isn't a true guest model yet, I'd be very careful using it for external stakeholders. I’d recommend checking your admin settings to see if automatic access is on and ensuring you default those items to private from the start. For now, Confluence guests or JSM portals are still your best bets for safe external collaboration.