Categories and Groups

[Sally]

Hi folks,

I am still struggling with the same problem.

How do I configure project server so that PM's can launch their own projects
(in Project Server) in a read/write mode from PWA but only launch projects
(in Project Server) where they are a team member as read only from PWA.

I've tried setting only "allow users in this category to view all projects
they manage" option on the My Projects Category and I've set the Project
Managers group, my tasks category permissions to allow Open project. But to
no avail.

Is it unrealistic to expect this define of refinement from one group and
category?

I've confirmed the default setting several times.

Help would be greatly appreciated!

 

[Dale Howard [MVP]]

Sally --

Your Project Server administrator will need to do the following:

1. Log into PWA with administrator permissions
2. Click Admin - Manage Security
3. Select the My Projects category and click the Modify Category button
4. In the Projects section, deselect the "Allow users in this category to
view all projects in which they are a team member" permission
5. Click the Save Changes button
6. Click the Add Category button
7. Name the new Category something like "My Team Member Projects"
8. In the Users and Groups section, add the Project Managers group
9. In the Permissions grid, set only the "Open Project" permission to Allow
10. In the Projects section, select only the "Allow users in this category
to view all projects in which they are a team member" permission
11. Click the Save Changes button

That's how to do it. I could have simply pointed you at one of our Project
Server Experts FAQ's, but our server is being moved to New York City today.


Hope this helps.

 

[Sally]

Thanks Dale, I'll give it a try. Actually, I had found one of your FAQ's and
made the changes but they did not work. These instructions are slightly
different and I'll try again! Thanks!!!!!!!!!!!

 

[Sally]

Dale,

Sorry, but no luck. I double checked my entries twice. Under the My
projects category where I deselected the "allow users in this category to
view all projects in which they are a team member", the permissions grid
shows PM's having all of the standard PM permissions. Is this correct?

 

[Dale Howard [MVP]]

Sally --

What other changes have you made to the default permissions that determine
what projects each PM can see? If you have made other changes, you will
need to document them. Otherwise, I'm not sure I can troubleshoot this
issue through the newsgroup. Let me know.

 

[Sally]

Dale,

I double checked the standard permissions against the "book" several times
and will do so again.

I did as you said and created a new group with permissions as you suggested.
It didn't stop the access. BUT, when I checked denied for save project for
that new group, it worked. This suggests that permission was granted
somewhere or somehow else (I don't know where or how and I've looked for
hours). I am afraid that the brute force approach of DENIED will come back
to haunt me.

Thanks so much for your help. I kept trying to get at your FAQ's yesterday
so I suspected that you were moving it to New York.

THANKS FOR YOUR HELP AND BEST WISHES FOR EVERY SUCCESS IN NEW YORK.

Sally

 

[Dale Howard [MVP]]

Sally --

The fact that you had to select the Deny option suggests that the permission
is being given somewhere else in your security settings. If you look at the
Categories section of the Project Managers group, do you see only two
Categories listed? The defaults are My Projects and My Organization. If
you see anything else, what is it, and why is it there? Also, select the My
Organization category and examine the Permissions grid. Make sure that both
the Open Project or Save Project permissions are set to Not Allowed (neither
Allow or Deny is selected). Let us know what you find. Hope this helps.

 

[Sally]

Dale,

Please pardon me if this shows up twice. I don't think the original was sent.

Let's say that I'm setting permissions for a group (PM's) and the category
my tasks. According to "the book" only team members are standard for my
tasks. Which template should be used to set the category and global
permissions. The PM or TM template??

I will do as you suggested.

THANKS

 

[Dale Howard [MVP]]

Sally --

Why are you adding the My Tasks category to the Project Managers group?
What are you trying to accomplish? Let us know.

--
Dale A. Howard [MVP]
Enterprise Project Trainer/Consultant
http://www.msprojectexperts.com
http://www.projectserverexperts.com
"We wrote the books on Project Server"

 

[Sally]

That's a good question. I don't have a good answer except I've been trying
to make this work and got creative. So, I should remove the PM's from MY
tasks. When I get the global for my tasks, I would use the TM template
right? Under my projects, I would use the template for PM's (since we don't
use Resource Managers or Team Leads here yet). Under my organization, I
would use the Exec template to set the global permissions for exec's and so
on for the rest of the groups.

Sorry to be so dense! Thanks!!

 

[Dale Howard [MVP]]

Sally --

The more you change the default permissions to the Project Managers
cateogry, the more difficult it makes it to troubleshoot your security
problems. I will warn you that setting permissions using a Security
Template works well for setting the permissions in the Global Permissions
grid, but it does not work very well for setting permissions in the
Permissions grid of the Categories section. Hope this helps.