When using the "Email" button at top right of a Jira issue (provided by Jira "Email This Issue" add-on), any user in the system can browse the entire user directory, without restriction, by typing a partial email address. This could pose a security risk in some cases.
Is there any way to restrict this list to specific groups or sets of users?
You could use the user filter to restrict the users which will appear on that field. However you can't restrict per se a user from browsing the users if you have given him the "Browse users and groups" global permission.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.