Hello,
We have several customers who use our JIRA instance. These users are part of a group which have access to the Global Permissions "JIRA Users" and "Browse Users" (so they can mention other users in issues). For the record, they don't have the "Create Shared Objects" permission. Each customer can only access their respective project and see only users who are part of the same project (ie. they don't see other customers) when assigning issues or mentioning other users.
My problem is that with the "Browse Users" Global Permission, customers can see other customers in the Owner field when they search dashboards and filters.
So my question is the following:
Assuming they are no other place in JIRA that my customers would be able to see other customers, is there any way to prevent a group of users to search shared objects by owner?
I would also consider removing the search option altogether for customers if necessary.
Thanks
We limit the pool of users by groups for each project: project1devs, project1users and then assign these groups to the project roles. This way we can get very granular with who has access to what.
We do the same and that works at project level. But users still can see all users in the search filter or search dashboard screens.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Unfortunately, that is a problem. Once they have the permission, they can search on all names. Its all or none!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.