Why does an external user in Security Level able to view tickets not assigned to them?

Question

I have an external user that is in the proper security level to see a ticket assigned to them. They also have the following permissions for the project:

* Browse Project
* Assignable User
* Assign Issues
* Transition Issue
* Add Comments 
* Edit Own Comments
* Create Attachments

However, it seems like this user is still able to look at other tickets in the project that are not assigned to him/her. This user is only 'jira-user' group and all permissions and security levels have been assigned individually. (Not because this user is in a group) Any suggestions to help me out? I want this user to only be able to see the issues that are assigned to it.

Efrain plascenc · Answer

I see that you can edit/define users in Issue Security Scheme and Security Levels with this link but where would I define what a specific security level can do?

Dave · Answer

That's on a per-project basis, you can find the instructions at https://confluence.atlassian.com/display/AOD/Configuring+Issue-level+Security

Efrain plascenc · Answer

Thanks for the response, David!

Removed the Browse Project permission and now the user cannot access the project at all. Where can I go to implement issue security?