Limit/Restrict User Browsing

Is it possible to limit user browsing so that a user only can see other users which are in the same group or in a configurable group/groups? We do not want to grant the "Browse Users" global permission so that every user can see every other user for @ mentioning. But without the "Browse Users" global permission the mentioning doesn't work

3 answers

1 accepted

0 vote

No, you can't limit the group visibility to "same as me"

Atlassian have not even tried to implement it.  It is a bit of a pain for certain cases, but there's massive logical problems with implementing it.  Off the top of my head:

  • The default in JIRA is to have a group for "user can log in".  All (active) users are in it.  So if you were to implement something to do that, everyone would be able to see everyone else because they can all log in.
  • If you split all the groups down, you make a massive group maintenance headache for yourself - you have to micromanage every single group, even to the point of adding a new user meaning you have to go in and remove them from all the default groups
  • You make it almost impossible to manage projects accurately (unless every project is strictly limited to a specific set of groups) because your user fields have two layers of logic in them.  For example, assignee = role X, and then "is in same group as me".  Then you start getting questions like "Why can Alice assign the issue to Bob, but I can't?  Even though I can assign it to Charlie?"
  • User permissions and group management is already a big performance drag on JIRA.  Limiting it more means more load and it's entirely conceivable that you'd cause more performance problems.

    I'm sure there's more.
0 vote
Joe Pitt Community Champion Apr 29, 2016

Sort of. You can apply security schemes to issues that limit access. You can setup a default security scheme. Check out https://confluence.atlassian.com/jira/configuring-issue-level-security-185729623.html to start.

It would make a lot of sense to move permission to "Browse users and groups" from the global scope to the project level.

As a project team member, I want to browse only people from my projects instead of the entire directory or users and groups.

I'm afraid that is a non-starter.  Working out "who is in my project" becomes exponentially difficult because of Jira's flexibility, and, quite often, people are using mentions because they want to draw in someone who is not "in the project".

I would like something that skips groups and uses its own rules.  I should be able to group users into silos and people can only see people in their silo.  With the option to make any silos globally available if necessary (e.g. everyone can see the support team silo, even when they're not a support person)

Jira does the "is user on project" check already when deciding to show or not the project in the dashboard and elsewhere.

No, it does not.

It checks if a user has view issue, and create issue.  Project "users" can be a lot more complex than that.  Those are relatively simple checks, optimised, nothing to do with other users, and are absolutely not "is user on project" checks.

Maybe I don't fully understand this, but when a user opens the dashboard, or the list of Projects, there is a check for what projects their see. Surely this trickles down to each project's People (and Groups) list. So it's not that crazy. 

But, again, I may be seeing things. 

No, it's not that simple.  It checks view access.  Which is NOT the same as "person in the project".

Suggest an answer

Log in or Sign up to answer
Atlassian Community Anniversary

Happy Anniversary, Atlassian Community!

This community is celebrating its one-year anniversary and Atlassian co-founder Mike Cannon-Brookes has all the feels.

Read more
Community showcase
Julia Dillon
Posted Tuesday in Jira

Tell us how your team runs on Jira!

Hey Atlassian Community! Today we are launching a bunch of customer stories about the amazing work teams, like Dropbox and Twilio, are doing with Jira. You can check out the stories here. The thi...

492 views 1 18
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you