It's all about the answers!

Ask a question

Project area contributor can't create team area?


Guowei Jim Hu (1.0k910353) | asked Aug 20 '10, 8:19 a.m.
We encountered the following permission issue when one user with contributor role in a project area tried to create a team area or add one user to the members of an existing team area:
No permission to save Team Area (Server)

We checked the process configuration in the project area. For contributor role, all permitted actions are checked under Save Team Area (server) with Permissions under Team Configuration.


Under Project Cofiguration, for the Permission, we unchecked Modify the process configuration, Modify the collection of process attachments, Modify the collection of team members. But we do have Modify the project area properties and Modify the iteration structure checked.

So it looks like the configuration at project cofiguration overwrite one in Team Configuration for the permission, given the fact that the user can't add new member to an existing team area, whih assumingly caused by unchecking Modify the collection of team members in project area permission.


Is this expected behaviour or we are missing something here?

We want to have fine-grained permisssion control to avoid teamlead role in project area from changing process configuration we want to keep consistent across all project areas and teams.

We can solve this issue by give the user teamlead role in project area but thta is what we try not to do.

Any thoughts?

7 answers



permanent link
Qiong Feng Huang (76911610) | answered Aug 20 '10, 8:19 a.m.
JAZZ DEVELOPER
The permissions in team configuration and project configuration are
different. So the configuration at project will never overwrite
the one in Team Configuration for the permission. Please check in which
process area (team area or project area) the user was added as a member
with contributor role. This user should have the permission to create the
child team area of the team area or project area in which this user are
added as a contributor. So, if you want to allow this user to create a
team area under project area, you should add this user to the member list
of the project area with the contributor role.

permanent link
Guowei Jim Hu (1.0k910353) | answered Aug 20 '10, 12:24 p.m.
The permissions in team configuration and project configuration are
different. So the configuration at project will never overwrite
the one in Team Configuration for the permission. Please check in which
process area (team area or project area) the user was added as a member
with contributor role. This user should have the permission to create the
child team area of the team area or project area in which this user are
added as a contributor. So, if you want to allow this user to create a
team area under project area, you should add this user to the member list
of the project area with the contributor role.


We have checked that the user has been added as contributor to both the project area and team area member list but she still can't either add new users to the taam area or create a child team area under the project area she is member of contributor.

permanent link
Qiong Feng Huang (76911610) | answered Aug 22 '10, 6:27 p.m.
JAZZ DEVELOPER
I would suggest you check whether you customize the permission in
iteration or team areas.
There is doc about how to look up permission configuration:
http://jazz.net/library/article/32.

permanent link
Guowei Jim Hu (1.0k910353) | answered Aug 23 '10, 8:33 a.m.
I would suggest you check whether you customize the permission in
iteration or team areas.
There is doc about how to look up permission configuration:
http://jazz.net/library/article/32.


I checked and verified that we don't have any customization at either team or iteration areas.

And I can't find the artical following your link?

permanent link
Jared Burns (4.5k29) | answered Aug 23 '10, 2:37 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
On Fri, 20 Aug 2010 12:23:06 +0000, ghu wrote:

We encountered the following permission issue when one user with
contributor role in a project area tried to create a team area or add
one user to the members of an existing team area: No permission to save
Team Area (Server)

We checked the process configuration in the project area. For
contributor role, all permitted actions are checked under Save Team Area
(server) with Permissions under Team Configuration.


Under Project Cofiguration, for the Permission, we unchecked Modify the
process configuration, Modify the collection of process attachments,
Modify the collection of team members. But we do have Modify the project
area properties and Modify the iteration structure checked.

So it looks like the configuration at project cofiguration overwrite one
in Team Configuration for the permission.

Is this expected behaviour or we are missing something here?

We want to have fine-grained permisssion control to avoid teamlead role
in project area from changing process configuration we want to keep
consistent across all project areas and teams.

We can solve this issue by give the user teamlead role in project area
but thta is what we try not to do.

Any thoughts?

It sounds like you're trying to do the right thing. The setup you
describe should behave just as you expect. You shouldn't have to assign
the teamlead role.

I just tested this myself. I created a user, assigned the "contributor"
role in the project area and granted this role permissions for the Save
Team Area operation but nothing else. With this configuration, I'm able
to create team areas as that user.

So I suspect something about your configuration isn't quite what you
believe. The first thing I would check is the "user" for the person this
is affecting. Are there possibly two user accounts for that person? Could
you be granting the contributor role to one of those accounts but the
person is logging in with the other account?

- Jared
---------------------------------
Jazz Team Process

permanent link
Guowei Jim Hu (1.0k910353) | answered Aug 25 '10, 9:53 a.m.
So I suspect something about your configuration isn't quite what you
believe. The first thing I would check is the "user" for the person this
is affecting. Are there possibly two user accounts for that person? Could
you be granting the contributor role to one of those accounts but the
person is logging in with the other account?



Jared,
Thanks for the help.

I checked and there is only one account for the user on our server.

We just implemmented this recently and so far just found one case with the strange permission issue. So it sonds like it has something to do with her account.

I've also sent note to others with similar roles to check if they have the same issue.

permanent link
Guowei Jim Hu (1.0k910353) | answered Aug 27 '10, 2:27 p.m.
I just verified that other user with the same role (contributor at project area) can add members to team area.

So I guess you are righ thta it is not the configuration but something to do with this individual account.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.