JIRA :: How to prevent project visibility when Reporter/Assignee/User CF are given Browse Projects permission?

When the 'Browse Projects' permission is granted to either of the Reporter or Assignee or User Custom Field, the project name is visible to anyone, including users who has no relationship with the project, under the 'All Projects' page (/secure/BrowseProjects.jspa#all).

Is there any workaround to prevent this visibility?

2 answers

1 accepted

Accepted Answer
1 vote

Ah, yes, there's a quirk in the wording of these here.

The way the permissions work for "browse" is that they give the right to see the issues in a project to anyone who *could* be selected in those fields an issue. So, if you say "group X can report an issue", then everyone in group X can see the project, even if none of them ever report an issue.

I don't think the assignee works quite like that, but it's complicated, because I suspect it flows from the same "can report" problem.

There is a fix for the reporter issue - you can see it implemented on Atlassian's support site (if I report a support problem, you can't see it even though you can report issues in the same project).

What you need is "reporter browse" permission enabled. It is disabled by default because you need to be careful in how you use it (I think the rule is simple - do NOT use it for anything other than browse). See https://confluence.atlassian.com/display/JIRA/Current+Reporter+Browse+Project+Permission

I'd get that enabled and in place, and then see how the assignee works separately. I don't believe there's a fix for the user-picker though.

Suggest an answer

Log in or Sign up to answer
Community showcase
Posted Sep 25, 2018 in Jira

Atlassian Research Workshop opportunity on Sep. 28th in Austin, TX

We're looking for participants for a workshop at Atlassian! We need Jira admins who have interesting custom workflows, issue views, or boards. Think you have a story to sha...

440 views 7 5
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you