It's all about the answers!

Ask a question

Permission denied in "Save project area"


Shiping Ji (2132) | asked Jun 24 '08, 3:37 p.m.
Environment: RC5.

I can create project area but cannot save modifications to the project area afterwards. This also happened in RC4, the current user is the administrator of the project.

The following bug report seems to be exact same:
https://jazz.net/jazz/web/projects/Jazz%20Project#action=com.ibm.team.workitem.viewWorkItem&id=56543

7 answers



permanent link
Jared Burns (4.5k29) | answered Jul 03 '08, 12:08 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Hi, Pravesh.

This is the expected behavior. Administrators' special rights *only*
apply to changes made to the process specification, team membership, and
role assignments.

For anything else, you need to grant permissions.

Jared Burns
Jazz Process Team


pravesh wrote:
Kai,

Yes, I think my case is different. Isn't it true that if a user is a
member of the JazzAdmins repository group then they should be able to
Save a Project Area regardless of any other Project Area permissions?
That's not what I'm experiencing.

When logged in as JazzAdmin (member of JazzAdmins) I can not Save a
simple update to the Summary and Description fields of a Project
Area.

Additionally, as JazzAdmin, I can not add an Administrator to the
Project Area because I get a permission denied error when I attempt
to save the Project Area. However, if I add both an Administrator
and a Member, then attempt to Save the Project Area, then the save is
successful.

permanent link
Kai-Uwe Maetzel (85611) | answered Jul 03 '08, 12:06 p.m.
JAZZ DEVELOPER
Users belonging to the JazzAdmins group don't have special rights when
it comes to operations that area governed by process permissions.
Changing the Summary, or the Description, or the list of Administrators
of a project area are such operations. They are governed by process
permissions as defined in the project area's process.

Users listed as Administrators (and users who are member of the
JazzAdmins group) have very limited special rights as explained in
Jared's post.

Your last example is interesting. Adding a member is one of the special
rights granted to Administrators. The change to the list of
administrators is piggybacking on the override of the member change.

Kai
Jazz Process Team



pravesh wrote:
Kai,

Yes, I think my case is different. Isn't it true that if a user is a
member of the JazzAdmins repository group then they should be able to
Save a Project Area regardless of any other Project Area permissions?
That's not what I'm experiencing.

When logged in as JazzAdmin (member of JazzAdmins) I can not Save a
simple update to the Summary and Description fields of a Project
Area.

Additionally, as JazzAdmin, I can not add an Administrator to the
Project Area because I get a permission denied error when I attempt
to save the Project Area. However, if I add both an Administrator
and a Member, then attempt to Save the Project Area, then the save is
successful.

permanent link
Pravesh Patel (37612615) | answered Jul 03 '08, 11:01 a.m.
Kai,

Yes, I think my case is different. Isn't it true that if a user is a member of the JazzAdmins repository group then they should be able to Save a Project Area regardless of any other Project Area permissions? That's not what I'm experiencing.

When logged in as JazzAdmin (member of JazzAdmins) I can not Save a simple update to the Summary and Description fields of a Project Area.

Additionally, as JazzAdmin, I can not add an Administrator to the Project Area because I get a permission denied error when I attempt to save the Project Area. However, if I add both an Administrator and a Member, then attempt to Save the Project Area, then the save is successful.

permanent link
Kai-Uwe Maetzel (85611) | answered Jul 02 '08, 11:57 a.m.
JAZZ DEVELOPER
Pls see Jared's response in this thread. Project/Team Area
Administrators have very specific rights. They are not super users.
These rights are outline in the Administrator section of the editors.

Is your case different?

Kai
Jazz Process Team

pravesh wrote:
I have a similar issue with Permission denied in "Save project
area". Here's my setup:

User JazzAdmin has JazzAdmins repository permissions AND is listed as
the Project Area Administrator of the Test Project Area. This user
can not save changes to the Test Project Area.

Any idea what I might be missing here?

permanent link
Pravesh Patel (37612615) | answered Jul 02 '08, 10:36 a.m.
I have a similar issue with Permission denied in "Save project area". Here's my setup:

User JazzAdmin has JazzAdmins repository permissions AND is listed as the Project Area Administrator of the Test Project Area. This user can not save changes to the Test Project Area.

Any idea what I might be missing here?

permanent link
Shiping Ji (2132) | answered Jun 24 '08, 5:03 p.m.
This now works, thanks. However, it would be nice to give more detailed instructions on the team advisor about the steps to fix the problem rather than showing some strange action ids which most people don't have a clue :)

Another thing is about the logic in the project area editor, once people noticed that they are not allowed to do any modifications, they won't go to the process configuration to do any further changes because that means saving project area again which logically should fail as well..

permanent link
Jared Burns (4.5k29) | answered Jun 24 '08, 4:46 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
The project administrator feature currently serves two purposes:
1. This is a way to advertise to your team who is responsible for
administering your server. Team members are instructed in the UI to
contact these administrators if they need help related to the process
configuration.
2. Administrators have special rights to modify the process
specification and role assignments without needing process permissions.
This serves to prevent situations that could occur otherwise where
someone could inadvertently remove all permissions to modify the project
area, rendering the project unmodifiable. All users with the "JazzAdmin"
repository group also have this privilege for all project areas in the repo.

If you want to perform any other modifications to the project, you will
need to grant the associated permissions. They are in the "Project
Configuration" section of the project process.

--
Jared Burns
Jazz Process Team

jishiping wrote:
Environment: RC5.

I can create project area but cannot save modifications to the project
area afterwards. This also happened in RC4, the current user is the
administrator of the project.

The following bug report seems to be exact same:
https://jazz.net/jazz/web/projects/Jazz%20Project#action=com.ibm.team.workitem.viewWorkItem&id=56543

Please help.

Thanks.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.