List @Mention only users in permission schemes

[Yichi Zhang]

A change has been identified in Jira Software, on Server:

Before:

When a user is not in the permission scheme of a project, this user cannot be @mention or tagged in the comments. It applies to all projects with confidential information. We do not want all internals to have the permission to view these confidential projects.

Now:

When I tag (@) a user who is not in the permission scheme of the project (e.g., added as a single user, or in a group), the popup window with a list of users displays all users in the system. That includes all users that are not in the associated permission scheme.

Any ideas why this is happening?