Board permissions

[Brian]

I've created a KanBan board for Project A.  The board issue filter for the KanBan board is set to show all issues from 2 separate projects (Project A and Project B).  The filter is shared with Project: Project A.

The owner of project A and who also is admin for the KanBan board for Project A wanted to see the issues from Project B on her own board.  She is not a team member of Project B.  It works fine but the team members of Project B now can see the KanBan board for Project A and have access to all the issues from Project A.

From the Jira Help pages:

A board is available to all users who can view the saved filter on which the board is based. (Note that they will also need 'Browse' permission for the project(s) whose issues are shown on the board.)

If you wish to share a board with different people, you will need to either edit the saved filter (see the JIRA documentation on issue filters), or choose a different filter (see Configuring Filters).

In my example, the filter is only set to be shared with Project A.  Also the team members from Project B do not have "browse" permission for Project A.  They are not team members for project A at all so I don't believe they should be able to see the issues for project A.

[Patrick Cartier [Candylio] · Accepted solution]

1.  "The filter is shared with Project: Project A."

Can you explain this a little more? Since the filter is shared with project A I wonder which users or user groups have the browse issues permission in that project. 

2.  "The owner of project A and who also is admin for the KanBan board for Project A wanted to see the issues from Project B on her own board."

Are we talking about the board you mentioned in the beginning, the one you created? or a different one?

My guess is the issue lies in the first part, where the filter was shared.

[Brian]

Patrick, I believe the problem is stemming from my permission scheme.  I have "Browse Projects" set to any application user, thus users that aren't in a project role per se still have access to see issues.