I'have been working with Atlassian products for a couple of years and actually know everything about its main concept and the way they work (from user's and admin's side): the concept of permissions, restrictions, project roles, security schemas, adding user directories and setting global permissions.
We have been working out one tricky moment: we have defined our user base, set several directories for both customers and internal users. Every single project and space have correct view/edit restrictions/permissions set.
So, our customers/external users get selective access to concrete projects and spaces, agile boards and etc.
However, each of external user can still see other people's information. E.g, talking about Confluence - People Tab in main top menu allows our customers to see list of our employees, their Names, e-mails and some private information. Talking about JIRA - external user can always click on JIRA user and go to his profile via https://JIRAInstance.com/issues/secure/ViewProfile.jspa?name=user_name link and spy some details.
So, my question is: are there any way we can restrict our employees data (in JIRA and Confluence) from external users?
Regarding JIRA, "Browse users" permission in the Global permission is what you want.
Regarding Confluence, the following URLs will help you.
Hi team, I’m Avinoam, a product manager on Confluence Cloud, and today I’m really excited to let the Community know that all customers can now try out the new editing experience and see some of the ...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs