I added two new users, but did not give them access to any projects. However, they are able to get full administrative view of my business projects... which I don't want them to see.
Can anyone tell me how to prevent this?
The most common error is adding the jira-users group to the permission scheme. JIRA works on a Permit, not Restrict model. You GIVE permissions. You can't deny access. I suggest project roles. It allows the project admin to manage access.
There really isn't a fix. It clearly states how permissions are given and the jira-users group allows people to logon. It often comes up after they've been using JIRA for awhile and decide they don't want everyone to see a new project. The standard best practice security model is only allow access when needed, not give universal access and then restrict. However, this is how too many JIRA admins think.
Atlassian Summit is an excellent opportunity for in-person support, training, and networking.Learn more
Hi, everyone! Molly here from the Jira Service Desk Product Marketing Team :). In the spirit of this month's august-challenge, we're sourcing stories of Jira Service Desk activation fro...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs