Hi Tomas,
Yes unfortunately you can't save security group information in the template.
Project Server will assign security to the WSS sites if you turn it on. I
have included notes below on this behaviour. If you want to implement
different security outside of that you would either need to run code after
the site collection is created to assign your custom security.
Notes on Project Server - WSS security intergration
-----------------------------------------------------------
In the PWA admin there are the 'Manage Windows SharePoint Services' pages.
Here you can set if you want a WSS site to be automatically created each time
a project is first published into Project Server. The automatic creation of
a WSS site for each project is the default behaviour and it is desirable
because WSS provides the Issues, Risks and Project documents functionality.
If the site is not created, you will not have risks, issues or documents
functionality for that project.
WSS has a separate security system from Project Server. There is the
default option in Project Server to automatically populate users from Project
Server into project WSS sites when a project is published. Users are
populated into the following groups:
Project Managers (Microsoft Office Project Server)
Users who have published this project or who have Save Project permission in
Microsoft Office Project Server.
This group has full edit rights to the site. Basically the only thing they
can not do is change security.
Readers (Microsoft Office Project Server)
Users who have View Project Documents, Issues and Risks permission in
Microsoft Office Project Server.
This group only has view rights to site content.
Team members (Microsoft Office Project Server)
Users who have assignments in this project in Microsoft Office Project Server.
This group has Read, Edit, Delete and Create rights for site content.
Web Administrators (Microsoft Office Project Server)
Users who have Manage Windows SharePoint Team Services permission in
Microsoft Office Project Server.
This group has administrator rights to the site.
Notes
1. These groups are repopulated each time the project is published. If a
user is deleted from Project Server then they will be deleted from the WSS
site when the project is republished.
2. The Team Members group is often a problem as it means that resources on a
project are able to edit and delete project risks and issues. This is a
difficult on to work around. You can use generic resources and give the
actual resources the 'View Project Documents, Issues and Risks' permission,
this will automatically give them Reader rights. Alternatively you can turn
off the automated population and assign the security manually in WSS.
3. If there are new administrators in Project Server, they do not
automatically have admin rights in WSS. There is a feature in PWA admin that
allows you to sync the admin accounts so that new PWA administrators have
admin rights in WSS.
4. In the 'Manage SharePoint Sites' page in PWA admin, you can sync the
users for a site. This is a handy way to sync the users into WSS without
having to open the schedule and publish it. It is useful for schedules that
are rarely published (such as closed schedules) where you want to ensure that
the correct users have access to the WSS content.
Public Site
===========
There is a public site used for the Public Documents. There is the option
to automatically populate the users who have access to this site. If you
enable this option in the 'Site Provisioning settings' PWA page, then all PWA
users will be added to the Project Managers group for the site. This gives
them full edit rights to the site. Basically the only thing they can not do
is change security.
So what are the settings I need to configure?
=============================================
You configure these settings in PWA administration.
Manage Windows SharePoint Services > Site Provisioning Settings Page
1. (Automatically / Manually) create a team site when a project is published.
2. (On/Off) Automatically add users to a site when a project is published
3. (On/Off) Automatically add new users to the Public site
Manage Users and Groups
The following permissions apply when sites are automatically created and
users automatically populated:
Category permissions
'View Risks, Issues and Documents' - This will give the users Reader rights
to all WSS sites for projects in that Category.
'Save Project' - This will give the users Project Manager rights to all WSS
sites for projects in that Category.
Global permissions
'Manage Windows SharePoint Team Services' - This will give the users
Administrative rights to all WSS sites.
I hope this helps.
