I have a user group with two users who have access to JIRA and Confluence and the permissions are set so that they should only be able to view one project in JIRA and one space in Confluence. However, they are able to see the profile updates of two other users (User 1 and 2) from two unrelated groups, but not all the profile updates of other users in the same groups as User 1 and 2.
Things I have tried:
- Created accounts with the same permissions as the affected user group (Group A) and was able to replicate the view of the profiles
- Created accounts with the same permissions as the users whose profiles were able to be viewed and weren't able to view any other group's information
- Reviewed the permissions of users whose profile were able to be viewed and did not find permissions that were different to other users whose profiles weren't able to be viewed
- Removed Group A's access to Confluence which stopped both profile updates from appearing.
- Created an account and made the same profile update, however this did not appear in the activity stream or 'all updates' tab
Other info
- User 1 - Has access to Confluence only (Profile update appears in JIRA activity feed: update made a few days ago)
- User 2 - Has access to JIRA and Confluence (Profile update appears in Confluence 'All updates' tab: update made late last year)
So my question here is.. How can I stop these updates from appearing without having to remove Group A's Confluence access?
