It's all about the answers!

Ask a question
QuestionsTagsUsersBadges
Guidelines | FAQ
Follow this question
Question details

×42,884

question asked: Jun 20 '09, 12:35 p.m.
question was seen: 4,150 times
last updated: Jun 20 '09, 12:35 p.m.

Related questions

Modify Work Item attribute Allows Workflow Actions

0
derry davis (232●2●20●16) | asked Jun 20 '09, 12:35 p.m.
Hi All,
We've created several custom work items with custom fields and ran into an interesting situation. We want to allow 'everyone' the ability to submit a custom wi but not move it through the entire workflow. So we remove all permissions for the group and only set the 'create' permission for the wi. However this doesn't appear to stop the ability of users to move the wi through the workflow, i.e. I can move it from 'new' to 'in progress' even if I don't have the permissions to do so. A side note, we had to add modify permissions for several custom fields in order to be able to do a save.

Only team permissions have been changed; project permissions are set to the default (full). However I don't see anything in the project permissions that would lead me to add/remove it.

Any suggestions?
Thanks in advance, Derry.

4 answers

Most liked answers ↑|Newest answers|Oldest answers

0
permanent link
Martha (Ruby) Andrews (3.0k●4●43●51) | answered Jun 20 '09, 3:36 p.m.
JAZZ DEVELOPER
Hello,

Are all of the actions under the "Trigger a workflow action" disabled for 'everyone'? Is the work item assigned to a category that is associated with the team area you are configuring in your process?

Martha
Jazz Developer

Hi All,
We've created several custom work items with custom fields and ran into an interesting situation. We want to allow 'everyone' the ability to submit a custom wi but not move it through the entire workflow. So we remove all permissions for the group and only set the 'create' permission for the wi. However this doesn't appear to stop the ability of users to move the wi through the workflow, i.e. I can move it from 'new' to 'in progress' even if I don't have the permissions to do so. A side note, we had to add modify permissions for several custom fields in order to be able to do a save.

Only team permissions have been changed; project permissions are set to the default (full). However I don't see anything in the project permissions that would lead me to add/remove it.

Any suggestions?
Thanks in advance, Derry.
0
permanent link
Patrick Streule (4.9k●2●1) | answered Jun 21 '09, 5:45 a.m.
JAZZ DEVELOPER
We've created several custom work items with custom fields and ran
into an interesting situation. We want to allow 'everyone' the
ability to submit a custom wi but not move it through the entire
workflow. So we remove all permissions for the group and only set the
'create' permission for the wi. However this doesn't appear to stop
the ability of users to move the wi through the workflow, i.e. I can
move it from 'new' to 'in progress' even if I don't have the
permissions to do so. A side note, we had to add modify permissions
for several custom fields in order to be able to do a save.

Only team permissions have been changed; project permissions are set
to the default (full). However I don't see anything in the project
permissions that would lead me to add/remove it.

Up to 2.0 RC2, the creator and the owner of a work item got more rights
than configured in the process. Since 2.0 RC2, the permissions are checked
exactly as configured, also for the owner and the creator.

Please see:
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/61272

--
Regards,
Patrick
Jazz Work Item Team
0
permanent link
derry davis (232●2●20●16) | answered Jun 22 '09, 8:14 a.m.
Hi Martha, Patrick,
Thanks for the replies. Regarding the trigger a workflow point, we tried it both with all items disabled and with only the desired action enabled. However with the latter, we had disabled the create work item action. And have been unable to test the combination of both checked (will try that today).
We'll also pursue testing this on R2 RC2 (or later).
Thanks again and will keep you updated.
-Derry
We've created several custom work items with custom fields and ran
into an interesting situation. We want to allow 'everyone' the
ability to submit a custom wi but not move it through the entire
workflow. So we remove all permissions for the group and only set the
'create' permission for the wi. However this doesn't appear to stop
the ability of users to move the wi through the workflow, i.e. I can
move it from 'new' to 'in progress' even if I don't have the
permissions to do so. A side note, we had to add modify permissions
for several custom fields in order to be able to do a save.

Only team permissions have been changed; project permissions are set
to the default (full). However I don't see anything in the project
permissions that would lead me to add/remove it.

Up to 2.0 RC2, the creator and the owner of a work item got more rights
than configured in the process. Since 2.0 RC2, the permissions are checked
exactly as configured, also for the owner and the creator.

Please see:
https://jazz.net/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/61272

--
Regards,
Patrick
Jazz Work Item Team
0
permanent link
derry davis (232●2●20●16) | answered Jul 14 '09, 10:18 a.m.
This is working as expected in RTC 2.0. I am limited by my role(s) even if I created the record. Thanks to all who replied.

Your answer

Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.