I'm using JIRA to manage a Scrum Development Project and I've observe that JIRA can send invitations by email to anyone even if that user has not been created using the correspondent functionality (user management). Then, when those invited is loged in, a user is created as a jira-software-users group member. On this conditions JIRA lets that any invited explore, créate issues (for any Project that exists), and search issues.
Don't you think that this functionality is to much open, I mean, The invitation itself let the user alter the present configuration (product backlog) of a Project. From my point of view this invitation need to be limited and associated to a Project specific so that the user can not alter configuratios so easily. Otherwise, our apreciated invited could create a caos in our projects.
Here is the article that talks about the different ways users can be created in Jira. however based on your tags you might be talking about people added as request participants in Service Desk projects so you might get more help from this or this article.
It is tricky to give targeted advice with the limited information provided and without access to your system to review your settings.
I hope this helps.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.