[Urgent] How to set limitation: users can only access to the project they're working on

[ViviG]

Our company are working on quite a lot projects on JIRA, some of them have cooperation relationship with 3rd party vendors , we don't want all users to see all the projects within our company in JIRA. As the administrator of JIRA, can I set limitation of the permission/access that users can only access to projects they're involved in , they should not see issues of other projects that not related to them.

[Nic Brough -Adaptavist-]

I'm assuming you have got the default setup, which puts jira-users into all projects and hence says "anyone who can log in is in every project as a user".

To fix that,

1. Add the users into the roles in the projects they need to see.
2. Remove "JIRA users" from the roles that grant it access to all projects.
3. Consider going into "roles" and removing the jira-users from "default roles", so that it does not get added to new projects