Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

Permissions and their hierarchy

My user in RTC has the following repository permissions:
- JazzAdmin
- JazzUser
- JazzProjectAdmin

Within a project area, I'm a member of the team space with a role of "Manager" and also listed as an administrator of the Project. I'm also defined as an Administrator of the Team Area.

From my perspective, I'm every administrator allowable with respect to the repository and project settings.

In the Process Configuration (only at the Project level), my assigned role has every allowable action enabled. The same applies for the Team Configuration Permissions, again at the Project level. I have enabled every allowable permitted action in the Team level Process Customization.

With all these actions enabled and administrative roles set, I'm STILL getting Permission Denied errors for various actions, but most recently I'm seeing this with the "Create Build Engine" action.

Can someone guide me on why this may not be a permitted action, given my configuration?

Can anyone explain the permission hierarchy or at least point me to the documentation explaining it? Is there a way for a Project Administrator/Team Area Administrator to also have a member role and not have permissions (i.e., wouldn't an admin definition override any role permissions regardless)? What's the standard/guideline for such configurations?

0 votes



One answer

Permanent link
My user in RTC has the following repository permissions:
- JazzAdmin
- JazzUser
- JazzProjectAdmin

Within a project area, I'm a member of the team space with a role of "Manager" and also listed as an administrator of the Project. I'm also defined as an Administrator of the Team Area.

From my perspective, I'm every administrator allowable with respect to the repository and project settings.

In the Process Configuration (only at the Project level), my assigned role has every allowable action enabled. The same applies for the Team Configuration Permissions, again at the Project level. I have enabled every allowable permitted action in the Team level Process Customization.

With all these actions enabled and administrative roles set, I'm STILL getting Permission Denied errors for various actions, but most recently I'm seeing this with the "Create Build Engine" action.

Can someone guide me on why this may not be a permitted action, given my configuration?

Can anyone explain the permission hierarchy or at least point me to the documentation explaining it? Is there a way for a Project Administrator/Team Area Administrator to also have a member role and not have permissions (i.e., wouldn't an admin definition override any role permissions regardless)? What's the standard/guideline for such configurations?


http://jazz.net/library/article/291

This article explains everything you could ever want to know about how permission lookup works in RTC.

- Jared

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Dec 08 '10, 1:50 p.m.

Question was seen: 4,677 times

Last updated: Dec 08 '10, 1:50 p.m.

Confirmation Cancel Confirm