Restricting Read access between TeamAreas
I know how to restrict write access to artifacts ( Test Plans, Testcases, ...) to members of other team-areas, but I need to restrict even read access. Is it possible? I tried defining categories in the Project Area, and associating them to team-areas, but, still, as an example, members of each team area can read other team-area Plans.
Accepted answer
Currently read-access is only controlled at the Project Area level.
Team Areas can be used for write-access permission.
Using Team Areas for read-access is something we've heard before and a valid scenario but not yet implemented in RQM. The enhancement is tracked in Support read access control on team area (74538)
Regards,
John Nason
QM Development
Team Areas can be used for write-access permission.
Using Team Areas for read-access is something we've heard before and a valid scenario but not yet implemented in RQM. The enhancement is tracked in Support read access control on team area (74538)
Regards,
John Nason
QM Development
2 other answers
Within project areas and team areas, you add users as members. Depending on the access control settings in a project area, membership in that project area or one of its team areas can determine whether a user has access to project area and team area artifacts.
[Source: http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0m5/topic/com.ibm.jazz.platform.doc/topics/c_understanding_user_access_control.html]
It appears the same users are in both team areas. For more information, see http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0m5/topic/com.ibm.jazz.platform.doc/topics/c_restricting_read_access_project_areas_web.html.
[Source: http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0m5/topic/com.ibm.jazz.platform.doc/topics/c_understanding_user_access_control.html]
It appears the same users are in both team areas. For more information, see http://pic.dhe.ibm.com/infocenter/clmhelp/v4r0m5/topic/com.ibm.jazz.platform.doc/topics/c_restricting_read_access_project_areas_web.html.
Comments
Hi Paul,
I defined One Project Area, containing 2 team-areas ( say TA1 and TA2 ). Both team-areas have the same main administrator, and different users.
So, I defined two users UTA1 and UTA2, each one only in the relevant TA.
I tried the following settings in the Access Control:
1) Members in Project Hierarchy -> both users can read everything
2) No one -> UTA1 and UTA2 cannot even log into the PA
3) Users in the access list only ( with both users in the list ) -> as point 1.
It looks like the Access Control is effective at PA level, not at TA level.
Any hint is welcome, thanks in advance
Sandro