Restrict access to users based on project type

[Sai Krishna]

Hi

I have a requirement where i have to restrict users based on the projectbtype

example, i have a project A where a specific user group should have access to that project to view and create tickets , not all the users who are in default user group should get access.

In the attached screen shot where  users in "devops" group  where there are 12 users should be able to access a specific project ,  but in my case users who are not part of  devops group are able to get access to that project, how can i restrict the users who are not part of that group?

Any quick response would be appreciated .

Thanks

Saikrishna 

[PADMA KOTHAKOTA]

Hi @Sai Krishna,

Restrict the browse project permissions and create project permissions to Specific Group(i.e"devops" ). So that users who belong to this group can create and view the project and others cannot.

Select the project--> Permission Scheme --> Edit the Permission and select the Browse and create permission and select Granted to as Group and in Groups select Devops. 

Check the Browse and create permission in permission scheme if the permission is granted to any other Groups , Users , Application access etc remove them from that permission and be sure that permission is granted to only to Devops group.

[Joe Pitt]

JIRA works by GRANTING access. You can't restrict access. By default, it grants access to the group used to logon (used to be JIRA-users but may be different on your version).  This is probably where you're getting the access from.

1. The FIRST thing you need to do to get control is to remove any groups with logon privileges from the permission scheme unless you absolutely want everyone to have that permission.
2. Then I suggest you setup Project Roles for the various functions like, tester, QA, Browse Only, etc.
3. One permission scheme will cover almost all projects. The project admin controls project role membership

This may be a big effort, but it will payoff down the road by making it easy to control access.

[Michael Wohlgemuth]

Greetings

My recommendation would be to work with permission schemes and project roles to restrict/grant project specific access to usergroups.