My restricted users can see all projects when they create a new issues. How do I hid that?

[Ariella Cheskis-Gold]

Create Issue - JIRA 2015-11-20 12-08-23.png

When you go to projects as this person you see --> 

Browse Projects - JIRA 2015-11-20 12-12-05.png

[Jeremy Gaudet]

How are they 'restricted'?  If, for example, a project's permission scheme has "jira-users" allowed to create issues, then generally all users will be able to do so.  In summary:

1) For each project that the user shouldn't see, review the permission scheme.  If grants are made to explicit groups that shouldn't have access, remove them.

2) Where the create permission is granted to a project role, check the project's role.  If the role includes groups it should not, remove them.

If neither of those are the case, then the user must be in a group the user should not be in.  At that point, check the user's group membership and map it back to the explicit grants and/or role members.  That applies to the user as well, but it seems unlikely that the specific user will be granted explicit access.

[darrenpegg]

Issue Security