Forum

Item access control
 
Notifications
Retirer tout

Item access control

3 Posts
2 Utilisateurs
0 Reactions
2,534 Vu
(@v1n1c1u3gdm)
Posts: 2
New Member
Début du sujet
 
[#2659]

Hello Everyone.

Firstly I'd like to say that I googled a quite a bit (even searched this forum) but still could not find out what is happening to me. My scenario is as follows:

I have 5 teams under the same project (I have only one project so far, at this point it doesn't really matter). I wish all teams could see (read) all of each others items (Tickets, Actions, Activities, Requirements, Tests ...), but I wish only the assigned person (or assigned person's team) to change the items fields. Does it make sense? If not, why?

What I've done (and does not work) is set everyone to the same [project member] profile (except me, the adm) I have also tried multiple profile configurations (even tough they are semantically incorrect, only partially achieving what I want with guest profile). I also have duplicated all users as resources and set different teams to all to all users. It seems to me that no user can be assigned a Item unless (s)he is a project resource (makes sense) but I can't figure out how the access control is working. I also tried to create the Item before and after the profile change, which made no difference.

I'm using a test user (not adm) configured using the profile I mentioned and I'm still capable of editing other people items.

Last but not least, all users are Active Directory users, does it make any difference?

Vinicius Menezes


 
Posté : 19 Oct PM 20:1010
(@babynus)
Posts: 14952
Membre Admin
 

Hi,

First, there is no impact from authentification method (LDAP, AD or internal).

Then, when configuring habilitations, you simply did not take point from the start.
It is much simpler than what you tried :
- define nex Acces Mode (for instance, let's call it Team access mode)
- on this acces mode, define CRUD rights as :
Read : Elements of own projects
Create : No element (or Elements of own projects, anyway someone has to create item, but this can be Project Leader)
Update : Elements he is responsible for
Delete : No element
- then, on Acces Mode to Data, use this mode for concerned items (Activities, Tickets,...) for profile used by your team members (Project Member or any other profile you could have created)
- You'll just have to Affect resources to Project with this profile
=> it will work as expected


 
Posté : 20 Oct AM 11:1010
(@v1n1c1u3gdm)
Posts: 2
New Member
Début du sujet
 

WOW! :woohoo: I was totally looking at the wrong place! :unsure: Thanks a lot Babynus!!!
I'll make my tests and mark as resolú (I guess it means resolved, right?) as soon as finish them.
Best of luck!


 
Posté : 20 Oct PM 22:1010
Share:
Retour en haut