Hi,
I have to create a new user that can view only one project and work only on it.
I created a new user, deleted the default group (jira-users), created a new group (group-1) view application access permission, assigned this new group to user, then I add group-1 to user project permission.
When I test this configuration logging in with the new user it can see all the project, working on all issue, edit all issue description etc..etc..
The new user have only the group-1 group, all projects have jira-users on the user project permission.
Maybe the problem is the Issue-level Security, I haven't configure it!
I'm doing something wrong? I can't understand why this user have a user-level project access while only one project have group-1 selected.