How can I limit the visibility of the project?

[Denis Shestov]

Hi Guru! 

my task may be very simple, but I can not cope with it.

there are many projects. we want our external partners to work in the jira.
I must limit the visibility of projects from each other. and I understand that this should be done in the access scheme. BUT!

for the experiment - I removed ALL access rights from the schema. left only: browse projects. 

if in this resolution I put REPORTER or Current assignee OR any User custom field value  

this project begins to see ANY user who was able to enter the application! 

Yes, this user can not do anything in the project and can not see the tasks inside the project. But the name of the project itself is displayed in the list of projects!

Help pls! 

How to fix this problem? 

p.s. test user - new in system, it is not used anywhere. 

[Denis Shestov · Accepted solution]

I understand this is the solution to my problem: https://confluence.atlassian.com/jirakb/how-to-customise-jira-core-so-reporters-only-see-issues-they-reported-779290924.html

i will try

[Mizan · Accepted solution]

Anyone who has the permission to browse the project can see the project.

All the projects associated to the permission scheme will be visible to users with the browse project permission. (There can be multiple permission schemes)

What you are encountering is a bug https://jira.atlassian.com/browse/JRASERVER-31720

https://confluence.atlassian.com/jirakb/granting-browse-project-permission-to-current-assignee-reporter-or-user-custom-field-value-allows-all-users-to-view-project-information-586056400.html

[Denis Shestov]

"Anyone who has the permission to browse the project can see the project."

again: New User. in permission scheme: 1 value:

Browse Project: REPORTER or Current assignee 

how this user can see the project name if it is not REPORTER or Current assignee in this project??

[Mizan]

Did you see the bug report ?

[Denis Shestov]

Sure. I just told you that the behavior of the jir is not logical in this case. 

[Denis Shestov]

https://confluence.atlassian.com/jirakb/how-to-customise-jira-core-so-reporters-only-see-issues-they-reported-779290924.html?_ga=2.266718094.182849728.1507541639-1657565687.1498118677 

it's work for REPORTER or Current assignee

but not work for User custom field value

you do not have a solution?

Thank you for reply

[Mizan]

Do you have a user customfield created ? 

For the requirement, it has many solutions . 

Simple one : 

1. Create a group for external users if they are not defined yet eg: jira-external-users

2. Remove external users from 'jira-users' group

3. Give the application access to 'jira-external-users' , this can be done from the Application Access setting . (Press g+g then type application access)

4. Create new permission scheme . Ensure that Browse project access is given to 'jira-external-users' along with 'jira-users'

5. Associate this permission scheme to the projects which you want to show to the external users

[Denis Shestov]

how to provide access to external customers - I know.

I have custom fields to add auditors to them.

and if I give permission for custom fields - the project is displayed again. 

and further. The project also becomes visible if you add a new permission: Current assigner

[Mizan]

Strange , it seems the bug also affects user customfield .

BTW , are you sure you have checked the bug report I mentioned earlier ? https://jira.atlassian.com/browse/JRASERVER-31720

[Denis Shestov]

Many thanks, Mizan for the feedback!

answer to my quetion: https://jira.atlassian.com/browse/JRASERVER-37117

so.. will wait )