My restricted users can see all projects when they create a new issues. How do I hid that?

Create Issue - JIRA 2015-11-20 12-08-23.png


When you go to projects as this person you see --> 

Browse Projects - JIRA 2015-11-20 12-12-05.png



2 answers

How are they 'restricted'?  If, for example, a project's permission scheme has "jira-users" allowed to create issues, then generally all users will be able to do so.  In summary:

1) For each project that the user shouldn't see, review the permission scheme.  If grants are made to explicit groups that shouldn't have access, remove them.

2) Where the create permission is granted to a project role, check the project's role.  If the role includes groups it should not, remove them.

If neither of those are the case, then the user must be in a group the user should not be in.  At that point, check the user's group membership and map it back to the explicit grants and/or role members.  That applies to the user as well, but it seems unlikely that the specific user will be granted explicit access.

Issue Security smile

Suggest an answer

Log in or Sign up to answer
Community showcase
Asked Thursday in Jira Ops

I'm John Allspaw, Ask Me Anything about incident analysis and postmortems

I'm John Allspaw, co-founder of   Adaptive Capacity Labs, where we help teams use their incidents to learn and improve. We bring research-driven methods and approaches to drive effective inciden...

4,344 views 20 13
View question

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you