Keeping PM's out of each others projects

[David]

Dale,

You had responded to another person with the following statement:

"If you install Microsoft Project Professional on each project managers PC,
this would not create duplicates and inaccurate results. If you leave the
default Project Server security settings, the system will allow each project
manager to open his/her own projects, but will not allow him/her to open any
other project manager's projects."

Where and what is the security settings to lock PM's out of each others
projects? When we go to open a project, a window opens up with all the
project that have been published and anybody can open anybody elses project.
We are running PWA 2003 and Project 2003

David

 

[Dale Howard [MVP]]

David --

The security settings are specifically in the My Projects category and the
Project Managers group in PWA. The default settings only permit each
project manager to see his/her own projects. You do not need to change
anything to make this happen. Because you are the Project Server
administrator, you have permission to see EVERYONE'S projects, so your
objection to my statement is invalid. Hope this helps.

--
Dale A. Howard [MVP]
Enterprise Project Trainer/Consultant
Denver, Colorado
http://www.msprojectexperts.com
"We wrote the book on Project Server"

 

[David]

Dale,

Someone else was originally the Administrator, but because of problems with
that person I've taken over this function.

I understand what you said about the setting being one of the switched in My
Project. But do you know which switch it is? This is where I'd think it
would be but which switch is set incorrectly? Or am I just in the wrong place?

ON- Allow users in this category to view all projects they manage.
ON- Allow users in this category to view all projects in which they are a
team member.
OFF- Allow users in this category to view all projects managed by resources
that they manage
ON- Allow users in this category to view all projects assigned to
resources that they manage

David

 

[Dale Howard [MVP]]

David --

Have you had someone who is only a member of the Project Managers group log
into Project Server through Microsoft Project Professional? If so, what
projects do they see, if any?

Do you know if the previous Project Server administrator changed any of the
default settings in Project Server? If so, what changes did he/she make?

 

[David]

Dale,

Don't know if the previous Admin changed anything or not.

Let me restate my problem:

I have people that I've set up as Project Managers in Admin using the
Project Mangers Template to set permissions. I've also set these people up
with My Project Categories. When they sign on to PWA all they can see is
their projects when they go to the Project Center. Which is good. BUT, when
they sign into Project and do a File - Open they are presented with ALL the
proejct that have been Published to the Web. And at this point they can open
any project that has been created, regardless of who created it. This is
where I need the security.

Hope this makes it a little clearer.

David

 

[Dale Howard [MVP]]

David --

You are going to way too much work trying to set up Project Server, knowing
that the default settings would have taken care of your problem. Without
knowing whether the previous Project Server administrator made changes to
the system and what changes he/she might have made, and not knowing what
changes you may have made as well, I can only take a stab in the dark at a
solution for you. Try this procedure, assuming the default permissions are
still in place:

1. Log into PWA with administrator permissions
2. Click Admin - Manage users and groups
3. Click the Groups link in the sidepnae
4. Select the Project Managers group and click the Modify Group button
5. In the Categories section, select the My Organization category
6. In the Permissions grid of the Categories section, make sure that
NEITHER the Allow or Deny permissions are selected
7. Click the Save Changes button

Beyond this, I would strongly recommend that your purchase our books on
Project Server 2003. The books offer a complete treatment on setting up
Project Server as the administrator and using Project Server as a project
manager. Click on the URL in my signature block for information on ordering
our books.

 

[Gary L. Chefetz \(MVP\)]

David:

<swag>

Any chance that the Project Managers have also been added to the MY
ORGANIZATION category? Any other groups added to this category other than
Administrators, Executives and Portfolio Managers?

</swag>

What may not be granted to users through one category or group, can be
granted through another. Permissions are cumulative. Without the ability to
see the entire picture of your system's security configuration, the only
thing anyone can offer you are educated S.W.A.G. s

--

Gary L. Chefetz, MVP
"We wrote the books on Project Server"
http://www.msprojectexperts.com

For Project Server FAQs visit
http://www.projectserverexperts.com

For Project FAQs visit
http://www.mvps.org/project

-

 

[Ivor Davies]

Gary & Dale - In the My Organization category - do you UNCHECK BOTH OPEN AND
SAVE (ALLOW & DENY) boxes or just SAVE?

I'm having the same problem.

Thanks..

Ivor

 

[Dale Howard [MVP]]

Ivor --

Exactly WHAT problem are you having?

Gary & Dale - In the My Organization category - do you UNCHECK BOTH OPEN
AND
SAVE (ALLOW & DENY) boxes or just SAVE?

I'm having the same problem.

Thanks..

Ivor

 

[Ivor Davies]

I want to make sure that project managers can only OPEN THEIR OWN PROJECTS,
and not some other PM's.

Everytime I try to restrict them by change the My Organizations Category or
the Project Manager's Group, I end up locking them out of other things, such
as the ability to review and approve their resources time sheets.

At the LCBO our project managers ARE ALSO resource managers - there is no
separation, they wear both hats...

Ivor

 

[Dale Howard [MVP]]

Ivor --

The default permissions in the My Projects category allow a project manager
to see, open, and save the following types of projects:

1. The actual projects for which he/she is the project manager
2. Projects in which he/she is a team member
3. Projects in which his/her resources are team members

This could the source of your problem, but without knowing what changes you
have made to the default permissions in Project Server, I'm not sure I can
troubleshoot your problem remotely. You might try the following to see if
it solves your problem:

1. Log into PWA with administrator permissions
2. Click Admin - Manage security
3. Select the My Projects category and click the Modify Category button
4. In the Projects section, deselect the second and fourth options if they
are selected
5. Click the Save Changes button

Just a thought. Maybe someone else has an idea for you, too. Hope this
helps.

 

[Ivor Davies]

Thanks Dale - I'll try what you suggested and let you know.

Ivor

 

[C. Smith]

What this issue resolved?

Thanks Dale - I'll try what you suggested and let you know.

Ivor