JazzProjectAdmin permissions
Hi
CLM 3.0.1.2. We have a customer who need's to setup permissions at the JazzProjectAdmin level. For example Lets say there is a user (USERA) who is a part of the JazzprojectAdmin group and is authorized to administer PROJECTA. If there is another project area PROJECTB the user (USERA) is able to view the data of this project even though this user is not a part of this project. This is something which the customer does not want and considers it a breach. The customer understands that there are permissions which can be setup at the project level. Is there a way to setup that a user who is a part of the JAzzPRojectAdmin repository group is not able to view the data of some other project which he is not a part of it? Regards V.Niranjan |
Accepted answer
Jared Burns (4.5k●2●9)
| answered Aug 07 '12, 7:43 p.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
The assertion that JazzProjectAdmins can read all project areas is mistaken. Only users in the JazzAdmins repository group have elevated read permissions.
You should work with your customer to understand why their USERA is able to access PROJECTB. The answer will be one of the following. Either: - PROJECTB's visibility is set to "Everyone" - PROJECTB's visibility is set to "Members of the project area hierarchy" and USERA is a member - PROJECTB's visibility is set to "Users in the access list" and USERA is in the access list - USERA is a project administrator on PROJECTB Otherwise, USERA will not be able to access PROJECTB. Jared Burns selected this answer as the correct answer
|
2 other answers
Your answer
Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.