Modify Work Item attribute Allows Workflow Actions
Hi All,
We've created several custom work items with custom fields and ran into an interesting situation. We want to allow 'everyone' the ability to submit a custom wi but not move it through the entire workflow. So we remove all permissions for the group and only set the 'create' permission for the wi. However this doesn't appear to stop the ability of users to move the wi through the workflow, i.e. I can move it from 'new' to 'in progress' even if I don't have the permissions to do so. A side note, we had to add modify permissions for several custom fields in order to be able to do a save.
Only team permissions have been changed; project permissions are set to the default (full). However I don't see anything in the project permissions that would lead me to add/remove it.
Any suggestions?
Thanks in advance, Derry.
We've created several custom work items with custom fields and ran into an interesting situation. We want to allow 'everyone' the ability to submit a custom wi but not move it through the entire workflow. So we remove all permissions for the group and only set the 'create' permission for the wi. However this doesn't appear to stop the ability of users to move the wi through the workflow, i.e. I can move it from 'new' to 'in progress' even if I don't have the permissions to do so. A side note, we had to add modify permissions for several custom fields in order to be able to do a save.
Only team permissions have been changed; project permissions are set to the default (full). However I don't see anything in the project permissions that would lead me to add/remove it.
Any suggestions?
Thanks in advance, Derry.
4 answers
Hello,
Are all of the actions under the "Trigger a workflow action" disabled for 'everyone'? Is the work item assigned to a category that is associated with the team area you are configuring in your process?
Martha
Jazz Developer
Are all of the actions under the "Trigger a workflow action" disabled for 'everyone'? Is the work item assigned to a category that is associated with the team area you are configuring in your process?
Martha
Jazz Developer
Hi All,
We've created several custom work items with custom fields and ran into an interesting situation. We want to allow 'everyone' the ability to submit a custom wi but not move it through the entire workflow. So we remove all permissions for the group and only set the 'create' permission for the wi. However this doesn't appear to stop the ability of users to move the wi through the workflow, i.e. I can move it from 'new' to 'in progress' even if I don't have the permissions to do so. A side note, we had to add modify permissions for several custom fields in order to be able to do a save.
Only team permissions have been changed; project permissions are set to the default (full). However I don't see anything in the project permissions that would lead me to add/remove it.
Any suggestions?
Thanks in advance, Derry.
We've created several custom work items with custom fields and ran
into an interesting situation. We want to allow 'everyone' the
ability to submit a custom wi but not move it through the entire
workflow. So we remove all permissions for the group and only set the
'create' permission for the wi. However this doesn't appear to stop
the ability of users to move the wi through the workflow, i.e. I can
move it from 'new' to 'in progress' even if I don't have the
permissions to do so. A side note, we had to add modify permissions
for several custom fields in order to be able to do a save.
Only team permissions have been changed; project permissions are set
to the default (full). However I don't see anything in the project
permissions that would lead me to add/remove it.
Up to 2.0 RC2, the creator and the owner of a work item got more rights
than configured in the process. Since 2.0 RC2, the permissions are checked
exactly as configured, also for the owner and the creator.
Please see:
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/61272
--
Regards,
Patrick
Jazz Work Item Team
Hi Martha, Patrick,
Thanks for the replies. Regarding the trigger a workflow point, we tried it both with all items disabled and with only the desired action enabled. However with the latter, we had disabled the create work item action. And have been unable to test the combination of both checked (will try that today).
We'll also pursue testing this on R2 RC2 (or later).
Thanks again and will keep you updated.
-Derry
Up to 2.0 RC2, the creator and the owner of a work item got more rights
than configured in the process. Since 2.0 RC2, the permissions are checked
exactly as configured, also for the owner and the creator.
Please see:
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/61272
--
Regards,
Patrick
Jazz Work Item Team
Thanks for the replies. Regarding the trigger a workflow point, we tried it both with all items disabled and with only the desired action enabled. However with the latter, we had disabled the create work item action. And have been unable to test the combination of both checked (will try that today).
We'll also pursue testing this on R2 RC2 (or later).
Thanks again and will keep you updated.
-Derry
We've created several custom work items with custom fields and ran
into an interesting situation. We want to allow 'everyone' the
ability to submit a custom wi but not move it through the entire
workflow. So we remove all permissions for the group and only set the
'create' permission for the wi. However this doesn't appear to stop
the ability of users to move the wi through the workflow, i.e. I can
move it from 'new' to 'in progress' even if I don't have the
permissions to do so. A side note, we had to add modify permissions
for several custom fields in order to be able to do a save.
Only team permissions have been changed; project permissions are set
to the default (full). However I don't see anything in the project
permissions that would lead me to add/remove it.
Up to 2.0 RC2, the creator and the owner of a work item got more rights
than configured in the process. Since 2.0 RC2, the permissions are checked
exactly as configured, also for the owner and the creator.
Please see:
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/61272
--
Regards,
Patrick
Jazz Work Item Team