Why does a new user have access to a project?

[Michael Arndt]

I'm a bit rusty on my Jira skills.

I added a new user to Jira but didn't add her to any projects yet.

For some reason she's seeing one project called Billing & Payroll.

She wasn't added to the project nor was she added to any groups. 

Not sure why she's seeing it. What else might be controlling this?

[Tanya C]

Hi @Michael Arndt - check the Permissions and Users and Roles on that one project.  They may have it 'wide open' so that's the only one she can see at this time.

There could be a permission of 'any logged in user' or 'any user on the web' which is used on that one project.

[Michael Arndt]

"Any logged in user" rings a bell. Where do I find that setting?

[Tanya C]

If you don't want 'any logged in user' to have permission to that project then either that project's Permissions scheme or their Users and Role screen may require editing.

I'm not sure there is a global admin setting to not allow 'any logged in user'. That would require some more searching.  Here's at least one article.  https://community.atlassian.com/t5/Jira-questions/What-does-quot-Any-logged-in-user-quot-mean-in-JIRA-permission/qaq-p/682383

Cheers - Tanya