Hi,
I have set a client user group with permissions to only view one project.
This is working well.
However, when I logged in as a user in that group to test it, I noticed that I can still access the 'people' tab.
Through this tab I am able to access the admin area of Jira via 'manage users'. If this right, this is not good as it means clients can access our full admin area despite it being locked.
I can see it is locked as the admin area is not available in the top-right menu when I log in as a member of that client group.
Is this an oversight or is there some way to lock down the people tab?
Related to this is there any way to lock down the apps tab? I have timesheeting apps in there which do not have permissions settings, so clients can view timesheets for their project.
Cheers
Lewis
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.