User Management - how do I prevent users from accessing certain Projects ?

Question

User Management - how do I prevent users from accessing certain Projects ?  It seems the Project Roles assignment screen is not working properly.  Please see attached.

I've read something about... If the user has a "Users or Developers" role, then they have assumed access to the unchecked projects.  Well, what if I don't want them to have access to those  projects.

Doug Lightfoot · Answer

thanks guys

Ramiro P · Answer

And just to add to what @Nic said I always recommend to configure the permission scheme with only the project roles, that way you can easily see who is able to see the project looking on the user roles inside project administration.

If you want to add a group to a permission in the project you just add the group to the role. A little more work but more control too...

Nic Brough -Adaptavist- · Answer

No, there's no "assumption" about roles.

Two things to look at.  Start with the "permission scheme" for a project.  Look at the line that says "browse project".  A user will have access to your project if they match anything on that line.  (It will probably say something like "all people in the role of users")

Once you've seen that rule, head over to the project user list (members) to see how people match it.

The one thing that is likely to trip you up is the Atlassian *default* - all users have to be in a group that says "this person can log in".  This is "jira users".  That's fine, except that another default setting is to include "jira users" in the role of "users", which means everyone who can log in gets access to all the projects.  I suspect that's what is biting you - you need to unpick this default.  I generally recommend you have a group that says "can log in", and NEVER use it for anything else (i.e. permissions or roles).

See https://confluence.atlassian.com/display/JIRA/Managing+Project+Permissions