Team Member User Permission Setttings for Server config

[Spiro T.]

Hi,

I seem to have a problem understanding the permission settings used within
the Server environment

I understood that if a user has the following permission setting:

Allow Deny
Group1: 0 0
Group2: 0 0
Group3: 0 0

Result: User not permitted.


Allow Deny
Group1: 0 0
Group2: 0 1
Group3: 0 0

Result: User not permitted.


Allow Deny
Group1: 1 0
Group2: 0 0
Group3: 0 0

Result: User permitted.


Question: Why then, if in USERs profiles I have neither Allow or Deny set in
their global and category permission setting, and the GROUP (i.e., Team
Member) they belong to "must" have ALLOW set in the category "See Projects
in Project Center View" permission, when the GROUP (i.e., Team Member) is
part of member of the CATEGORY (i.e., My Tasks) which has "See Projects in
Project Center View" set to ALLOW? The follooing outlines the scenario I'm
facing..

Allow Deny
User Profile : 0 0
Group : 1 0
Category : 0 0

Result: User NOT permitted


Allow Deny
User Profile : 0 0
Group : 1 0
Category : 1 0

Result: User permitted


Allow Deny
User Profile : 0 0
Group : 0 0
Category : 1 0

Result: User NOT permitted


Also, Are there any good references I can use to get a good understanding of
permission setting for server environments?

Thanks,
/Spiro

 

[Mike Glen]

Hi Spiro,

Try posting on the server newsgroup. Please see FAQ Item: 24. Project
Newsgroups. FAQs, companion products and other useful Project information
can be seen at this web address: http://www.mvps.org/project/.

Mike Glen
Project MVP

 

[Dale Howard [MVP]]

Sprio T --

The Deny permission trumps all others when a user is a member of multiple
groups. Consider this example, based on your previous examples:

Allow Deny
Group1: 1
Group 2: 1
Group 3: 1

Even though the user is allowed the permission, based on his membership in
Groups 1 and 2, the Deny permission in Group 3 will trump the two other
Allow permissions. The order of precedence for cumulative permissions, from
strongest to weakest is: Deny, Allow, Not Allowed. Hope this helps.

 

[Spiro T.]

Yes, that's one that I did not specifically list.