User not assigned to a project group should not be able to see the project
Answered
Hello,
I have a user who is part of 2 project groups. But as an admin, I have access to a dozen of projects.
The user can see all of the projects, including the ones he is not part of (no issues assigned to him and he is not part of the project group). So he can see those projects even if he cannot access the details (he cannot see the content, list of issues...).
But I would like him to see only projects he is working on when he clicks on the "Project" tab. He should not be able to see all of the projects he is not working on.
Can you please help on this one ?
Thanks and Regards
Louise.
Please sign in to leave a comment.
Louise, please check, does this user have 'Read Project' permission in any of the roles assigned to him? Does he have any permissions granted on the 'Global' project level?
Could you please send screenshots with the full list of permissions this user has? You can attach those here or you can send them to youtrack-feedback@jetbrains.com
Thank you.
Hi Liubov,
Thanks for your answer. The developer only has the role "developer" assigner. And yes he has the "read project" permission in the role "developer", because if I remove this permission he and every other developers are not able to display any projects (and the link "Projects" on the header of Youtrack disapears).
Please see screenshots below of the groups the developer is assigned to (only developer role), and the permissions in the Developer role.
Thanks for your help!
Hello Louise, I'm sorry for the delay.
If your user has some role on the Global project, it means that he has that role on all the projects in your system.
So if the user has 'Developer' role on the Global project, and the 'Developer' role includes the 'Read project' permission (Consulter un projet), then this user can view all projects in the system. In your case I'd recommend to revoke that role from the project Global from that user and grant it for particular projects instead.
Please let me know if you have any further questions. Thank you.
Hi Liubov,
Thanks for your help !! It works now, I juste revoked the "developer" role from the global project as you mentioned.
I have another question: on an issue page, on the right side the developers only see the fields in display mode (cause we don't want them to modify the values). But is it possible to let them modify only 1 field ? (for example the field "Etat" = State).
Because when I check on the roles and authorizations, I can only give them the right to change every fields or none.
Thanks for your help!
Louise
Louise, you can make some fields of your project private (all except one, for example), and then make sure that your developers don't have 'Update Private Fields' permission.
More about private fields you can learn here: https://www.jetbrains.com/help/youtrack/incloud/2017.1/Private-and-Public-Issue-Fields.html
Hi Liubov,
I already have some "private" fields on my projects so the developers cannot "see" them.
But I want developers to be able to display some fields (read only) and for other fields to display them + to edit them (for example for the "state" field).
Is it possible ?
Thanks
Louise
Louise, if you are already using private fields in that project for other purposes, then configuring your project like you describe is not possible.
As an option I can only recommend to write a custom workflow and forbid your developers to change some fields. In this case they will still be able to open the dropdown and select some values from the list, but their changes will be reverted.
More about our workflows you can learn here: https://www.jetbrains.com/help/youtrack/incloud/2017.1/Workflow-Overview.html