We’ve built an app that allows portal users to upload files to an Azure Blob Storage
One thing we noticed is that there doesn’t seem to be the functionality to limit the access to a particular project only which Atlassian app, Jira, Confluence ecc. So when we install our app on JSM its on all our projects.
I read this topic: Is it possible to limit a Forge app's data access scope to specific Jira projects? But the reply and solution suggested by Atlassian doesn’t work because the security policy only covers apps installed via the marketplace not forge apps.