How can I limit the visibility of the project?

Hi Guru! 

my task may be very simple, but I can not cope with it.

there are many projects. we want our external partners to work in the jira.
I must limit the visibility of projects from each other. and I understand that this should be done in the access scheme. BUT!

for the experiment - I removed ALL access rights from the schema. left only: browse projects. 

if in this resolution I put REPORTER or Current assignee OR any User custom field value  

this project begins to see ANY user who was able to enter the application! 

Yes, this user can not do anything in the project and can not see the tasks inside the project. But the name of the project itself is displayed in the list of projects!

Help pls! 

How to fix this problem? 

p.s. test user - new in system, it is not used anywhere. 

2 answers

2 accepted

0 vote
Mizan Community Champion Oct 12, 2017

Anyone who has the permission to browse the project can see the project.

All the projects associated to the permission scheme will be visible to users with the browse project permission. (There can be multiple permission schemes)

What you are encountering is a bug https://jira.atlassian.com/browse/JRASERVER-31720

https://confluence.atlassian.com/jirakb/granting-browse-project-permission-to-current-assignee-reporter-or-user-custom-field-value-allows-all-users-to-view-project-information-586056400.html

"Anyone who has the permission to browse the project can see the project."

again: New User. in permission scheme: 1 value:

Browse Project: REPORTER or Current assignee 

how this user can see the project name if it is not REPORTER or Current assignee in this project??

Mizan Community Champion Oct 12, 2017

Did you see the bug report ?

Sure. I just told you that the behavior of the jir is not logical in this case. 

Mizan Community Champion Oct 12, 2017

Do you have a user customfield created ? 

For the requirement, it has many solutions . 

Simple one : 

1. Create a group for external users if they are not defined yet eg: jira-external-users

2. Remove external users from 'jira-users' group

3. Give the application access to 'jira-external-users' , this can be done from the Application Access setting . (Press g+g then type application access)

4. Create new permission scheme . Ensure that Browse project access is given to 'jira-external-users' along with 'jira-users'

5. Associate this permission scheme to the projects which you want to show to the external users

how to provide access to external customers - I know.

I have custom fields to add auditors to them.

and if I give permission for custom fields - the project is displayed again. 

and further. The project also becomes visible if you add a new permission: Current assigner

Mizan Community Champion Oct 12, 2017

Strange , it seems the bug also affects user customfield .

BTW , are you sure you have checked the bug report I mentioned earlier ? https://jira.atlassian.com/browse/JRASERVER-31720

Many thanks, Mizan for the feedback!

answer to my quetion: https://jira.atlassian.com/browse/JRASERVER-37117

so.. will wait ) 

Suggest an answer

Log in or Join to answer
Community showcase
Sarah Schuster
Posted Jan 29, 2018 in Jira

What are common themes you've seen across successful & failed Jira Software implementations?

Hey everyone! My name is Sarah Schuster, and I'm a Customer Success Manager in Atlassian specializing in Jira Software Cloud. Over the next few weeks I will be posting discussion topics (8 total) to ...

3,203 views 13 19
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot