How to hide projects from users with not yet authorized to see any project?

[halil_cicek]

I allow new users from out of organization to participate in one of our project but eventough I haven't give any access right to a project, they are able to see several of them including product discoveries. As you can imagine it is not acceptable. 

How can I conceal these projects from any user has no right to see them? 

Quick note: We are using the free package for product discovery therefore there might not be solution for that but in jira software we are using standart package so there should be solution on these ones

[Trudy Claspill · Accepted solution]

Hello @halil_cicek 

Can you clarify what you mean exactly by the users can "see" the projects? 

Besides JPD, what are the types for the projects they see?

Setting aside JPD for the moment, in Jira a project can be either Company Managed or Team Managed. Access to these two types of projects is handled differently.

For Team Managed projects there is a project level Access setting with three options; Open, Limited, and Private. If that is set to Open or Limited, any user licensed to access your instance will be able to see those projects.

Ref: Team-managed Space permissions 

For Company Managed projects access is managed by Permission Schemes and primarily by the Browse Projects permission. You would need to review the Permission schemes for each project to ensure that the users are not included in an entity (group, project role, etc.) that has the Browse Projects permission. The default permission schemes give the Browser Projects permission to "Any logged in user".

The "default" configuration of Jira is to allow all licensed users to see all projects. The default state is not to block access to projects and require you to proactively grant access.

You have to configure the project access/permissions to limit who can see the projects, and then insure that you manage your users so that they are not added to a group/etc. that will grant them access.

[halil_cicek]

@Trudy Claspill  Thank you for the response on  jira software projects

what about JPD ?

[Trudy Claspill]

I don't have an environment were I can test with JPD projects.

Based on the documentation:

https://support.atlassian.com/jira-product-discovery/docs/manage-your-app-and-space-access/

It appears that a user must have the Contributor or Creator role at the Application level to see the content of a JPD project. With only a Jira application role assigned it appears that the user could see that the project exists, but perhaps not see the content of the project.

JPD also appears to have project level Access setting which can affect visibility. And according to the answer on this post from February , there seems to be an implication that perhaps "anyone" can see the project content if the Access setting is Open or Limited.

[halil_cicek]

I'm experiencing that all users without any given access right to a project in JPD rather then jira access, they can see the project and if they look inside they can see all ideas right now. In my case it is unacceptable right now.

I'm curious that could be because we are using free plan for JPD at the moment and that small issue could be atlassian's price trap for us to force us buy at least the standart package maybe.

[Trudy Claspill]

All the advice I provided was based on your post tags indicating you are using a Standard version.

If you are using a free subscription then it is not possible to customize project permissions while in that subscription. For Jira all users granted User access to the application will have the equivalent of Administrator access in all projects. If you downgraded to the free version then any permission schemes you had set up prior to that would continue to apply. Refer to 

https://support.atlassian.com/jira-cloud-administration/docs/what-is-the-free-jira-cloud-plan/

I'm not sure what happens with the JOD projects in that case. I'll have to do more research.

[halil_cicek]

@Trudy Claspill  as I suspected