Permission denied in "Save project area"
Environment: RC5.
I can create project area but cannot save modifications to the project area afterwards. This also happened in RC4, the current user is the administrator of the project. The following bug report seems to be exact same: https://jazz.net/jazz/web/projects/Jazz%20Project#action=com.ibm.team.workitem.viewWorkItem&id=56543 |
7 answers
Jared Burns (4.5k●2●9)
| answered Jun 24 '08, 4:46 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
The project administrator feature currently serves two purposes:
1. This is a way to advertise to your team who is responsible for administering your server. Team members are instructed in the UI to contact these administrators if they need help related to the process configuration. 2. Administrators have special rights to modify the process specification and role assignments without needing process permissions. This serves to prevent situations that could occur otherwise where someone could inadvertently remove all permissions to modify the project area, rendering the project unmodifiable. All users with the "JazzAdmin" repository group also have this privilege for all project areas in the repo. If you want to perform any other modifications to the project, you will need to grant the associated permissions. They are in the "Project Configuration" section of the project process. -- Jared Burns Jazz Process Team jishiping wrote: Environment: RC5. |
This now works, thanks. However, it would be nice to give more detailed instructions on the team advisor about the steps to fix the problem rather than showing some strange action ids which most people don't have a clue :)
Another thing is about the logic in the project area editor, once people noticed that they are not allowed to do any modifications, they won't go to the process configuration to do any further changes because that means saving project area again which logically should fail as well.. |
I have a similar issue with Permission denied in "Save project area". Here's my setup:
User JazzAdmin has JazzAdmins repository permissions AND is listed as the Project Area Administrator of the Test Project Area. This user can not save changes to the Test Project Area. Any idea what I might be missing here? |
Pls see Jared's response in this thread. Project/Team Area
Administrators have very specific rights. They are not super users. These rights are outline in the Administrator section of the editors. Is your case different? Kai Jazz Process Team pravesh wrote: I have a similar issue with Permission denied in "Save project |
Kai,
Yes, I think my case is different. Isn't it true that if a user is a member of the JazzAdmins repository group then they should be able to Save a Project Area regardless of any other Project Area permissions? That's not what I'm experiencing. When logged in as JazzAdmin (member of JazzAdmins) I can not Save a simple update to the Summary and Description fields of a Project Area. Additionally, as JazzAdmin, I can not add an Administrator to the Project Area because I get a permission denied error when I attempt to save the Project Area. However, if I add both an Administrator and a Member, then attempt to Save the Project Area, then the save is successful. |
Users belonging to the JazzAdmins group don't have special rights when
it comes to operations that area governed by process permissions. Changing the Summary, or the Description, or the list of Administrators of a project area are such operations. They are governed by process permissions as defined in the project area's process. Users listed as Administrators (and users who are member of the JazzAdmins group) have very limited special rights as explained in Jared's post. Your last example is interesting. Adding a member is one of the special rights granted to Administrators. The change to the list of administrators is piggybacking on the override of the member change. Kai Jazz Process Team pravesh wrote: Kai, |
Jared Burns (4.5k●2●9)
| answered Jul 03 '08, 12:08 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
Hi, Pravesh.
This is the expected behavior. Administrators' special rights *only* apply to changes made to the process specification, team membership, and role assignments. For anything else, you need to grant permissions. Jared Burns Jazz Process Team pravesh wrote: Kai, |
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.