Restrict group to certain issues

[Cyril Gabathuler]

Hi all

Following use case. We would like to add a new group of "external" users to our Jira which are only allowed to see a specific project and in there only specific issues. Everything else (other projects, other issues) should not be accessible to them. If possible I only wan't to adapt the issues they are supposed to have access to and not touch all the other issues.

So far I was unable to limit the access accordingly.

Thanks

Cyril

[Walter Buggenhout · Accepted solution]

Hi @Cyril Gabathuler and welcome to the Community!

First of all, you would need to make sure all your projects are indeed restricted. In company managed projects, that means making sure that the permission scheme(s) used in any project do not grant browse project permission to Any logged in user. If that is currently the case, you would have to update all permission schemes that are set up like that, remove Any logged in user from the browse project permission and instead explicitly grant access to your users using project roles and assigning your users to the appropriate roles on the people tab of project settings. In team managed projects, make sure that access is not configured as Open, as you would be facing the same problem there.

Once you've done that, you can assign your external users to a role in the one project set up for them. You assign the group to a role in the project in the same way as for your internal users.

Finally, to secure your individual issues in a single project, you would have to set up issue level security for the project. 

Hope this helps!

[Rudy Holtkamp]

So if you have done what @Walter Buggenhout wrote above (great explanation, by the way) about project restriction, you do need to change the issue level security for every issue in the project the external users are not allowed to see. All issues without an issue level security can be seen by all users with browse project permission.

This means that your requirement of only touching issues they are allowed to see, is not feasible. But with this setup you can achieve what you want.    

[Cyril Gabathuler]

Is there an option to add a security level to each issue by script or similar?

[Cyril Gabathuler]

It worked out for me with a bulk sync, thanks for the help!