With JIRA Service Desk v2.2-OD-08-D20141208... when "Service Desk Customer - Portal Access" has permission "Browse Projects" (the default), a service desk customer can see all portals, via servicedesk/customer/portals 
I only want them to see the specific portal for which they are a user.
If I remove "Service Desk Customer - Portal Access" from that permission, a customer is unable to access the portal corresponding to that project.
If I then add "Project Role (Service Desk Customers)" to that permission, the customer does then see only corresponding projects, which is good (though surprising, since it suggests the role rather than the permission, is being tested by servicedesk/customer/portals).
However, service desk now reports the following Permission scheme error
- The Service Desk Customer - Portal Access security type must be assigned to:
- The permission configuration for the Customer Portal is invalid. The Service Desk Customers role is assigned to:
(Is it safe to ignore that?)
Also, with either of those permissions I'd expect the customer to be able to browse issues in the corresponding JIRA project (ie via /browse/PROJ), but that URL redirects back to the portal (as does /browse/PROJ-2 etc).
In summary, how can I configure things so that:
- a customer of one service desk can't see any other service desk (of which he is not a customer), and
- a customer of a service desk can browse all issues in the corresponding JIRA project (assuming they know the correct URL)
References to relevant issues in https://jira.atlassian.com/browse/JSD would be appreciated.
