nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Jira permission issues :I dont want third parties to view all the projects of my internal Jira

Ruha Anu Antony

Hi All,

I have 3rd parties listed as "Business Representative" in my Jira User management. A business representative is ideally allowed to view only the projects that they have been assigned to as a member.

However I have now been made aware that they can see all the projects in the Jira system.

In the permission schemes i have checked and they are not allowed access. So i really dont know how to go about it. This is a data breach issue and needs to addressed quickly. Thankful for any help i can receive.

Kind Regards,

Ruha

Accepted answers

Ruha Anu Antony

Thank you for your answer @Patricia Francezi_iDev_ .I did investigation of the same page earlier and then when i didnt find a solution raised this query.

@Nic Brough -Adaptavist- Thank you for your response.I have just attached a screenshot to show that the role is not mentioned in "Browse project"

All comments

Patricia Francezi_iDev_

You should prefer project roles, and set up your permission schemes based on project roles, so your business representative, will have access in the project and only the project in they are member.

https://confluence.atlassian.com/adminjiracloud/managing-project-roles-776636382.html

There is no step by step solution for your case, but this is the way you need to investigate and apply.

Nic Brough -Adaptavist-

Just to add to this, you say "In the permission schemes i have checked and they are not allowed access" - this statement is clearly incorrect. If you have people who can see a project, they are allowed access by the project's permission scheme.

Have another look and look at the users, groups, project roles and dynamic roles that are named in "browse project". You will find that your business users are named in there in at least one way.

Ruha Anu Antony

Thank you for your answer @Patricia Francezi_iDev_ .I did investigation of the same page earlier and then when i didnt find a solution raised this query.

@Nic Brough -Adaptavist- Thank you for your response.I have just attached a screenshot to show that the role is not mentioned in "Browse project"

Ruha Anu Antony

Patricia Francezi_iDev_

The issue is: any logged in user can browse projects.

Your user group ios a logged in user, so, they will be able to see every single project in your instance.

you need to refine your permission scheme prefering using the project roles i mentioned.

thats why i said there is no step by step solution, it will depend on how you would like your instance to run

Ruha Anu Antony

@Patricia Francezi_iDev_ MAny thanks for your response. IT helped

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-software

jira-software-server