Project area contributor can't create team area?
We encountered the following permission issue when one user with contributor role in a project area tried to create a team area or add one user to the members of an existing team area:
No permission to save Team Area (Server) We checked the process configuration in the project area. For contributor role, all permitted actions are checked under Save Team Area (server) with Permissions under Team Configuration. Under Project Cofiguration, for the Permission, we unchecked Modify the process configuration, Modify the collection of process attachments, Modify the collection of team members. But we do have Modify the project area properties and Modify the iteration structure checked. So it looks like the configuration at project cofiguration overwrite one in Team Configuration for the permission, given the fact that the user can't add new member to an existing team area, whih assumingly caused by unchecking Modify the collection of team members in project area permission. Is this expected behaviour or we are missing something here? We want to have fine-grained permisssion control to avoid teamlead role in project area from changing process configuration we want to keep consistent across all project areas and teams. We can solve this issue by give the user teamlead role in project area but thta is what we try not to do. Any thoughts? |
7 answers
The permissions in team configuration and project configuration are
different. So the configuration at project will never overwrite the one in Team Configuration for the permission. Please check in which process area (team area or project area) the user was added as a member with contributor role. This user should have the permission to create the child team area of the team area or project area in which this user are added as a contributor. So, if you want to allow this user to create a team area under project area, you should add this user to the member list of the project area with the contributor role. |
The permissions in team configuration and project configuration are We have checked that the user has been added as contributor to both the project area and team area member list but she still can't either add new users to the taam area or create a child team area under the project area she is member of contributor. |
I would suggest you check whether you customize the permission in
iteration or team areas. There is doc about how to look up permission configuration: http://jazz.net/library/article/32. |
I would suggest you check whether you customize the permission in I checked and verified that we don't have any customization at either team or iteration areas. And I can't find the artical following your link? |
Jared Burns (4.5k●2●9)
| answered Aug 23 '10, 2:37 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
On Fri, 20 Aug 2010 12:23:06 +0000, ghu wrote:
We encountered the following permission issue when one user with It sounds like you're trying to do the right thing. The setup you describe should behave just as you expect. You shouldn't have to assign the teamlead role. I just tested this myself. I created a user, assigned the "contributor" role in the project area and granted this role permissions for the Save Team Area operation but nothing else. With this configuration, I'm able to create team areas as that user. So I suspect something about your configuration isn't quite what you believe. The first thing I would check is the "user" for the person this is affecting. Are there possibly two user accounts for that person? Could you be granting the contributor role to one of those accounts but the person is logging in with the other account? - Jared --------------------------------- Jazz Team Process |
So I suspect something about your configuration isn't quite what you Jared, Thanks for the help. I checked and there is only one account for the user on our server. We just implemmented this recently and so far just found one case with the strange permission issue. So it sonds like it has something to do with her account. I've also sent note to others with similar roles to check if they have the same issue. |
I just verified that other user with the same role (contributor at project area) can add members to team area.
So I guess you are righ thta it is not the configuration but something to do with this individual account. |
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.