I've been trying to set up a collaborative JPD project with a supplier. The aim is to give visibility into what we are working on and to allow them to add the work they are doing. This would then give a combined view. The issue is that when I make the user a User (creator) and limit their access to JPD they can click on a linked Jira ticket from JPD and it takes them to Jira where they can also look at other tickets that don't relate to their work. Has anyone managed to solve this or is it a bug?
I tried a contributor role, which does limit the access to Jira but also to editing JPD which defeats the purpose.