I'm guessing by "user files" you mean the user's profiles? You can turn off "browse users" in global permissions to stop people seeing other people's profiles.
If it's not that, you'll need to explain what you mean by "user files"
I recommend using groups and assigning them to the project roles while leaving the default permission scheme as generic as possible. Then assign the groups to the project roles and delete the default role assignments (jira-users etc.)
Hope I am understanding you correctly.
Atlassian Summit is an excellent opportunity for in-person support, training, and networking.Learn more
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG