Limit/Restrict User Mention to Project Team Edited

[Ayesha Azmi]

I'd like to restrict who certain group members can mention on an issue when commenting - only mention users who are part of the project.

Use case: 

• We have a client group for each project
  • The group only consists of client users
• On each project we add all the internal team members and clients with their respective roles - all clients have role 'client'
• Right now when the client tries to mention someone, they are provided a list of all our users on our system, which is not ideal as we don't want a client to be able to see other client names nor do we want them to mention the wrong team member

We are looking for a solution that only allows CLIENT roles or users part of a certain group to only be able to mention users who are part of the project. 

[Boris Berenberg]

You can’t do that. The closest you can do is remove Browse User global permission from everyone who is not a staff member.

[Ayesha Azmi]

But then will the clients be able to make comments and mention team members? That was the only reason that permission was added really.

This is a big issue for us and I'm sure other Atlassian users. Is there any plan for this to be added in the future or is there an app we can get that'll help us achieve this?

[Ayesha Azmi]

Any advise here? 

[Timani Tunduwani]

Is there a way to get around this? 

Right now we've been able to use Field Configuration to limit the users that can be selected in a custom user-picker field. However, the body allows you to mention everyone once you give the global permission. 

The only solution is to stand up a separate instance to limit the scope of user access seems like a lot of overhead. Unless there is an addon that does this?

Any chance the @ mention can be a configurable permission or modifiable via a Field or permission scheme?

[Steve Davis]

We'd also like a resolution for this. We would like to be able to limit @mentions to users who have access to the project in question.