My restricted users can see all projects when they create a new issues. How do I hid that?

Create Issue - JIRA 2015-11-20 12-08-23.png


When you go to projects as this person you see --> 

Browse Projects - JIRA 2015-11-20 12-12-05.png



2 answers

How are they 'restricted'?  If, for example, a project's permission scheme has "jira-users" allowed to create issues, then generally all users will be able to do so.  In summary:

1) For each project that the user shouldn't see, review the permission scheme.  If grants are made to explicit groups that shouldn't have access, remove them.

2) Where the create permission is granted to a project role, check the project's role.  If the role includes groups it should not, remove them.

If neither of those are the case, then the user must be in a group the user should not be in.  At that point, check the user's group membership and map it back to the explicit grants and/or role members.  That applies to the user as well, but it seems unlikely that the specific user will be granted explicit access.

Issue Security smile

Suggest an answer

Log in or Join to answer
Community showcase
Emilee Spencer
Published Friday in Marketplace Apps

Marketplace Spotlight: DeepAffects

Hello Atlassian Community! My name is Emilee, and I’m a Product Marketing Manager for the Marketplace team. Starting with this post, I'm kicking off a monthly series of Spotlights to highlight Ma...

56 views 0 3
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot