User Permissions

[emerson]

I need a definative way not allow users of dotproject to see other users projects, calandars, files and companies.

Thanks in advance

[Jonathan Kok]

This not definative, but here's what I did:

Create a new User Role, with the following permissions:

Non-Admin Modules - Allow - Access, View
Projects - Deny - View
Projects - Allow - Edit
Companies - Deny - Access
Tasks - Allow - Access, Add, Delete, Edit, View
Task Logs - Allow - Access, Add, Delete, Edit, View

Apply only this role to your user. Then, add the following Permission:

<specific project> - Allow - Access, View

This creates what I call a 'Specific Project Manager'. This person has the rights to edit a specific project, and all objects within. This person cannot view any other project, and the gantt charts only show the specific project he's been assigned via User Admin. I don't use Files, Tickets, or Forums, but I imagine if you added similar rights as Tasks, you'd get the same result.

I then created another User Role with the following permissions:

Non-Admin Modules - Allow - Access, View
Projects - Deny - View
Companies - Deny - Access
Tasks - Allow - Access, View
Task Logs - Allow - Access, Add, Edit, View

I applied this to a different user, and added the following permission:
<specific project> - Allow - Access, View

This created what I call a 'Specific Project User', who basically only has the rights to log work done in a specific project. By setting the access of specific tasks, you can limit who is able to add log entries. Unfortunately, multiple participants are able to edit each other's log entries in an assigned task, which is most unfortunate.

Ideally, there should be 'assigned projects/tasks/' and 'personal logs' options which would allow rights only to projects in which the user is a member, but in lieu of that, this so far is working.

HTH

[emerson]

Thank You. I will test this out.

[Arlenec]

I tried the suggestion for 'Specific Project User' setup. This solved my problem of the user being able to view all tasks on the 'Tasks per User' page.

Unfortunaltely, now the user is unable to add a Task log. The only error I see is 'Error on page' at the bottom of the screen on the left.

If I update the role to allow 'Edit' access for tasks, then the task logs can be added, but again the user can see all tasks on the 'Tasks per User' page.

Any suggestions would be appreciated.

[liquor]

I have the same problem - i dont want user to edit tasks but if you remove this permission, the user cannot add task logs (shows error). I think its because
when the task log is created, it also tries to modify the task progress % which is not allowed for the user...

[liquor]

Ok I found the bug in the mantis :
http://www.dotproject.net/mantis/bug_view_page.php?bug_id=0000844

According to developpers its not really a bug - its just the way permissions are...

[Arlenec]

Thanks for the feedback. Unfortunately, the bug you referred to does explain the need for 'edit' permissions on tasks, but I still have the problem that the 'Tasks per User' report shows all tasks to this restricted user, even those they have no business seeing.
Any suggestions for that problem?