Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Where are all the different permissions for work items?

Here's my problem: I just recently changed our automated build system to use a generic ID rather than my personal ID.  The ID is in the project area and the same team area and has the same roles as my ID, but it cannot see any work items!  It's funny because how this came about is the process was failing when trying to deliver a changeset because the process rule was not being met that required a related work item.  Yet, through the UI I could see that the changeset DID have a related work item.  Turns out, whenever I use MY ID, no problems.  Whenever I use the generic ID with (ostensibly) all the same roles as me, it can't "see" the work items.  In fact, I logged onto the web client using the ID and sure enough, even running a basic work item query comes up empty.  There are no errors, it just doesn't pull up any results, at all.

I assume this is some kind of permission issue.  I know about the Project Area permissions and the Team Area permissions which are both driven by role.  Again, this ID has all my roles.

Does anyone have any thoughts on what else this could be??

- Andy

0 votes

Comments

does the generic userid have the right license assigned?

1 vote

Will check on that, thank you! 

In addition to the license, is the generic userid part of any jazz groups?

1 vote

Thanks, Kot - we did check and the user is part of the right jazz group. 

Hi Andy,
Are you able to log in with this generic id to web interface? What is the error message when you attempt to open any work item? Please paste here screen snapshot.

1 vote

Krzysztof, I can log in as the generic ID but there is no error.  When I run a query it simply comes up empty - no results.  If I login as my own user (or any other person user on the project), the query returns hundreds of records.



I just created a new user on my 4.0.4 test system, no license and no role in the project, and they can still query workitems.  they cannot  get builds, source, plans, ...

the users is in the jazzusers group. if I remove them from the jaszzusers group they cannot logon.

1 vote

Thanks for doing that, Sam.  We now have a ticket to IBM and - assuming we figure it out! - I will post the resolution.  Whatever it is, it's not intuitive. 

showing 5 of 8 show 3 more comments


2 answers

Permanent link
the user needs to belong to at least one group, remember the groups JazzUser, JazzGuest etc are all about access to the database. The license, roles and permissions gate intraction. A JazzGuest will have view options and the JazzAdmin and/or JazzProjectAdmin allows you to give a role the ability to delete a work item. If you are not in one ot these groups you can't delete even if you set the permission in the role.

1 vote


Permanent link
Sorry for the wild goose chase.  Ultimately, the resolution here was that the rights in question were coming from a team area that the user was not in.  I had assumed the rights were coming from the parent project area and that they were being inherited but this was not the case.

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Apr 22 '14, 4:53 p.m.

Question was seen: 5,637 times

Last updated: May 07 '14, 11:56 a.m.

Confirmation Cancel Confirm