Your workflow needs to have "conditions" added to it.
The "browse project" permission allows users to SEE issues. The workflow transitions you are seeing as soon as that is granted are appearing because they aren't protected. If you look at the default workflow, you'll see it's got conditions on every step, like "must be a user in the project" or "must have resolve or close permission". No conditions = anyone who can see the issue can use the transition.
I'd start simple, and add "must be a user in the project" to any transition without any conditions.
Badges are a great way to show off community activity, whether you’re a newbie or a Champion.Learn more
Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs