Lock a stream not working as expected
in order to lock a stream, according to the forum discussions:
https://jazz.net/forum/questions/32955/how-tro-lock-a-stream
https://jazz.net/forum/questions/70421/how-to-lock-a-stream-or-component
the recommended way is to set stream owner to a special team that does not grant delivery permissions.
We tried the below test:
- create a scrum project area 'test'
- 'test' PA has user bob and Al, both bob and Al have team member role and have the permission to deliver the changeset
everyone role has no permissions set
- create a team area ' testteamarea', there is no member in this team area.
- create a stream 'teststream' and set owner to 'testteamarea'
- user bob tries to deliver changeset to teststream and it works
Here it seems that user bob as a member of project area will have access to its any team areas under this project area and its assigned role at PA level will be inherited automatically by the team area even though bob is not a member of team area.
My question is:
- is the member of PA supposed to have the same role(permissions) for the team areas under this PA?
- to lock the stream, "a special team that does not grant delivery permissions and make the stream owned by a team" in the above two forums actually suggest to point to a team area under a different project area in which bob is NOT a member of PA and Teamarea(such as a dummy PA and TA which has no members)?
Accepted answer
If you wanted to still have everyone be members of the PA, you could also try setting the role required to deliver in the TA to something higher than Team Member, so that even if Bob is a Team Member in the PA, he won't be able to deliver.
Comments
Thanks Melissa.
The two options work. I added the same role and member to TA(2nd option) and configured delivery permission to Not permitted instead of inheritance(default) and that works for me.
With many users, I think configurations are time consuming and the best option is still creating a dummy project/team and set it as stream's owner. This will be easily reversed as well once the stream is to unlock.
2 other answers
Note: In RTC 6.0.2 we added a feature that lets you lock streams and components to prevent deliveries to the files in those streams or components. Stream and component locks work in a similar manner to file locks but apply to the entire stream or the entire component in a stream. When a stream or component is locked, any attempted deliveries by users who do not own the lock will fail with an appropriate error message. The user that holds the lock can still perform deliveries to the stream. A lock does not only prevent deliveries, it also prevents any operation that affects the files in the locked component or stream. For example, a component replace is also prevented.
See: https://jazz.net/downloads/rational-team-concert/releases/6.0.2?p=newsDetails#stream-locking