How can I grant / restrict access to a projects by a user group?

Brian Borichevsky

I have several projects some of which are internal only and some are designed to be shared with external resources.

I want to create a new user(s) (User.ExternalA,B,...) who I ONLY want to be able to see project (Project.External01) and have no ability to see any of the internal projects (Project.Internal##).

I am trying to do this as simply as possible, I created an ExternalUsers Group, to which I added User.ExternalA.

I then tried to add the ExternalUsers group to the "People" for Project.External01.

However if I can't seem to find the right combination of adding / removing groups to where the external user can ONLY see the external projects.

I tried removing the jira-users / jira-developers group from the users and from the project "people" but that does not seem to work.

This seems like it should be easy to do.

Note: The information in the internal projects is proprietary and therefore I must protect it from the external users.

Thanks

Nic Brough -Adaptavist-

Jira does not restrict, it only grants permissions at the project level (issue security is a different story).

In theory, this is really simple, because all you have to do is set the permissions so that "users matching a rule can see the issue".  That grants permission.  It is often by saying something simple like "users in the role of 'user' in the project can see it", and then putting the users (or groups) you want into that role in the project.

But.

Jira ships with some terrible defaults which automatically grant access to anyone with a login, and before you can use the simple, sane and reasonably intuitive rule above, you have to unpick these dreadful defaults, so that you can actually do it.

There's a good guide to it over at https://community.atlassian.com/t5/Jira-questions/JIRA-Software-project-permission-restrict-user-access-to-one/qaq-p/779572