How can I limit user access to view and log issues against one JIRA project?

I created a new group which I will call X for this post. I created a test user that belongs to group X and group X has a custom permission scheme set up for that group only, where group X is referenced within. Unfortunately, when I logged in as the test user, I could still browse other projects and could create new issues against other projects when the test user should only be able to log against a specific project defined by the group X permission scheme. I was curious how I can limit group users to view only one project?

2 answers

3 votes

As well as checking the memberships, you'll want to look at the permission schemes. You will find things in there under "browse" that you need to check.

You probably won't be able to do this without revising all of your permission schemes and access - the Jira default setup includes a group called "jira users" which is used to say "can log in", but is then ALSO used to say "can use project". This is a bad design and the usual recommendation is to revise your access groups in such a way that you have a dedicated "can log in" group and do NOT use it for ANY project access (unless you've got projects that every single user should have, such as "jira support"). Either remove jira-users from most places and use other groups, or set up a separate group for it.

Thanks for your reply. I am attaching a screen shot of my current custom permission scheme associated with the group. Do I need to change anything here?

Nope, that looks fine.

I would pick up on the fact you've said the scheme is associated with a group - it's not. It uses a group to decide who to grant access to, and should be associated with project. (Note, this is probably just me being picky about language and misunderstanding what you've written, but I just wanted to make sure)

Check the 'Poeple' tab in the projects admin page and have a look at the 'Project Roles'. Most likely these are also used in your permission scheme

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Tuesday in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

162 views 1 17
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you