How to hide projects from users with not yet authorized to see any project?

halil_cicek

I allow new users from out of organization to participate in one of our project but eventough I haven't give any access right to a project, they are able to see several of them including product discoveries. As you can imagine it is not acceptable. 

How can I conceal these projects from any user has no right to see them? 

Quick note: We are using the free package for product discovery therefore there might not be solution for that but in jira software we are using standart package so there should be solution on these ones

Trudy P Claspill

Hello @halil_cicek 

Can you clarify what you mean exactly by the users can "see" the projects? 

Besides JPD, what are the types for the projects they see?

Setting aside JPD for the moment, in Jira a project can be either Company Managed or Team Managed. Access to these two types of projects is handled differently.

For Team Managed projects there is a project level Access setting with three options; Open, Limited, and Private. If that is set to Open or Limited, any user licensed to access your instance will be able to see those projects.

Ref: Team-managed Space permissions 

For Company Managed projects access is managed by Permission Schemes and primarily by the Browse Projects permission. You would need to review the Permission schemes for each project to ensure that the users are not included in an entity (group, project role, etc.) that has the Browse Projects permission. The default permission schemes give the Browser Projects permission to "Any logged in user".

The "default" configuration of Jira is to allow all licensed users to see all projects. The default state is not to block access to projects and require you to proactively grant access.

You have to configure the project access/permissions to limit who can see the projects, and then insure that you manage your users so that they are not added to a group/etc. that will grant them access.