JIRA :: How to prevent project visibility when Reporter/Assignee/User CF are given Browse Projects permission?

When the 'Browse Projects' permission is granted to either of the Reporter or Assignee or User Custom Field, the project name is visible to anyone, including users who has no relationship with the project, under the 'All Projects' page (/secure/BrowseProjects.jspa#all).

Is there any workaround to prevent this visibility?

2 answers

1 accepted

1 vote

Ah, yes, there's a quirk in the wording of these here.

The way the permissions work for "browse" is that they give the right to see the issues in a project to anyone who *could* be selected in those fields an issue. So, if you say "group X can report an issue", then everyone in group X can see the project, even if none of them ever report an issue.

I don't think the assignee works quite like that, but it's complicated, because I suspect it flows from the same "can report" problem.

There is a fix for the reporter issue - you can see it implemented on Atlassian's support site (if I report a support problem, you can't see it even though you can report issues in the same project).

What you need is "reporter browse" permission enabled. It is disabled by default because you need to be careful in how you use it (I think the rule is simple - do NOT use it for anything other than browse). See https://confluence.atlassian.com/display/JIRA/Current+Reporter+Browse+Project+Permission

I'd get that enabled and in place, and then see how the assignee works separately. I don't believe there's a fix for the user-picker though.

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published Monday in Jira Software

How large do you think Jira Software can grow?

Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...

713 views 6 13
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you