Template security

[anovak]

How can you keep people from updating templates that are used to create
projects they have access to by virtue of the resources assigned (using
the RBS)? In the templates, I have people assigned because that is
static on those types of projects. Problem is, I don't want the PM who
has access to those projects through the RBS to be able to update the
template used to create it.

Thanks,
Andy Novak
University of North Texas

 

[Gary L. Chefetz [MVP]]

Andy:

Assign only generic resources to templates.

 

[anovak]

Gary, I changed the resources to generic as administrator, went back in
as the PM userid and I was still able to save changes to the template.

Andy

 

[Dale Howard [MVP]]

Andy --

Have you tried the following:

1. Log into PWA with administrator permissions
2. Click Admin - Manage users and groups
3. Click the Groups link in the sidepane
4. Select the Project Managers group and click the Modify Group button
5. In the Global Permissions grid, set the Save Project Template permission
to Not Allowed (neither Allow or Deny is selected)
6. Click the Save Changes button

Let us know if this helps.

 

[anovak]

Thanks Dale. Like with projects, is there a way to allow people to
only save/update templates THEY have created or is it an all or nothing
thing?

Andy

 

[Dale Howard [MVP]]

Andy --

The purpose of an enterprise template is to make it available to everyone.
All PM's either have the right to save enterprise templates, or they don't.
Therefore, you should control this need with a project management
methodology of some type. Hope this helps.

 

[anovak]

So, then it has nothing to do with the RBS or whether you have assigned
generic or "real" resources to the project template, correct?

One more thing.....if you assign a "real" resource rather than a
generic one to a template and save it, are assignments created or only
if a project is saved? My guess would be no, only when the project is
created from the template.

Thanks,
Andy

 

[Dale Howard [MVP]]

Andy --

Correct.

I do not believe assignments are created until a project is created from the
template, saved, and then published.