JIRA :: How to prevent project visibility when Reporter/Assignee/User CF are given Browse Projects permission?

Sameera Shaakunthala [inactive]
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
October 17, 2012

When the 'Browse Projects' permission is granted to either of the Reporter or Assignee or User Custom Field, the project name is visible to anyone, including users who has no relationship with the project, under the 'All Projects' page (/secure/BrowseProjects.jspa#all).

Is there any workaround to prevent this visibility?

2 answers

1 accepted

1 vote
Answer accepted
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
October 17, 2012

Ah, yes, there's a quirk in the wording of these here.

The way the permissions work for "browse" is that they give the right to see the issues in a project to anyone who *could* be selected in those fields an issue. So, if you say "group X can report an issue", then everyone in group X can see the project, even if none of them ever report an issue.

I don't think the assignee works quite like that, but it's complicated, because I suspect it flows from the same "can report" problem.

There is a fix for the reporter issue - you can see it implemented on Atlassian's support site (if I report a support problem, you can't see it even though you can report issues in the same project).

What you need is "reporter browse" permission enabled. It is disabled by default because you need to be careful in how you use it (I think the rule is simple - do NOT use it for anything other than browse). See https://confluence.atlassian.com/display/JIRA/Current+Reporter+Browse+Project+Permission

I'd get that enabled and in place, and then see how the assignee works separately. I don't believe there's a fix for the user-picker though.

1 vote
Mauro Badii
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
February 2, 2015

Suggest an answer

Log in or Sign up to answer