Projects are not hiding for external customers in Jira CLoud?

[Vineet Kumar]

Hi All, According to the below doc, I have granted the Browse Project permission to the Client Project role and i am adding the client to the project role of only those projects which are associated to a particular customer. But somehow, When i am adding a user who is only added to jira-software-user group, i am able to view all the project name. Though i cannot see the data on those projects but it is still a security issue. Is there something which i am missing? Did Atlassian change something on the recent cloud versions?

https://confluence.atlassian.com/jirakb/how-to-restrict-project-access-to-different-isolated-user-groups-290750862.html

[Lukas Kinc]

Hi Vineet,

default project permission scheme in the Cloud allows to all of your users browse the projects.

Go to Project settings - permissions - and edit permissions of your permission scheme or switch to another scheme.

I recommend set permissions for "Project role", not for "Application access", but this deppends on character of your projects :-)

"Application access (Any logged in user)" means all of your jira users.

[Lukas Kinc]

Examples...

Hidden project permission settings:

Open project permission settings:

[Vineet Kumar]

Hi Lukas, Thanks for your response, Removing the "Any logged in user" from the Browse projects permission is the first thing which i did, And i have used project role instead of groups and even i have not added the test user to any of the projects roles, I can see all the projects from the user's login.