We have external users of jira (clients) who have been given access to a specific project only and we do not want them to view work logs on any of the issues in that project. Currently they can see time recorded on any of the issues in the project via the issue History tab.
We also do not want them to access the People button when they click on Jira Admin in their side menu (which they seem to have access to) as if they click on a person in our internal team they can see the latest issues that person has been working on from ALL client/internal projects in our Jira. This is important as it means currently we will breach our other clients privacy.