Project Plan Security from other project managers in Project Serve

[Ivor Davies]

Is there any way to secure ENTERPRISE projects saved on a PROJECT SERVER
(Project Server 2003) from modifications from other project managers.

For example: Project Manager A saves a ENTERPRISE project plan (logged into
the Project Server) and them publishes the plan for viewing.

Project Manager B then logs onto Project Server and attempts to change the
project plan that Project Manager A saved - edits and task deletions are made
to the original project plan.

Is there any way in Project Server 2003 to prevent this?

I have already set the security in our Project Server so that the PROJECT
MANAGERS GROUP CANNOT DELETE ENTERPRISE PROJECTS.

Any response would be greatly appreciated!

Thanks!

Ivor

 

[Dale Howard [MVP]]

Ivor --

Your Project Server administrator would need to do the following:

1. Log into PWA with administrator permissions
2. Click the Admin menu
3. Click the Modify users and groups link
4. Click the Groups link in the sidepane
5. Select the Project Managers group and click Modify Group
6. In the Categories section of the page, select the My Organization
category
7. In the Permissions grid of the Categories section, deselect the Save
Project permission (neither Allow or Deny is checked)
8. Click the Save Changes button

Performing the above steps will allow project manager B to open project
manager A's projects Read-Only, but PM B will not be able to save PM A's
projects. Hope this helps.

 

[Ivor Davies]

Dale - YOU'RE THE BEST!

Thanks so much.

I will try this out either later today or early tomorrow.

I will let you know how things work out.

Thanks again!

Take Care..

Ivor

 

[Dale Howard [MVP]]

Ivor --

You are welcome, my friend! Thanks for the kind compliment.

 

[Ivor Davies]

Dale - I had my manager perform this test - she sent me the following email
(attached):

Ivor,
I was able to open, change, save and publish the project plan for dept 832.

I added a task, changed an existing task and saved and published just the
proj plan.
then I reversed these changes and resaved and republished.

As I am not the project manager I should not have been able to do more than
just look.

thanks

I made the change you suggest - ensure that SAVE PROJECT PLAN was NOT
CHECKED on ALLOW OR DENY.

Is there some other setting that I may have missed?

Could something else in another group be allowing this (she is a member of
the PROJECT MANGERS / RESOURCE MANAGERS / EXECUTIVES group?

I even went into her SPECIFIC PROFILE IN EPM, and made sure that SAVE
PROJECT PLAN was NOT CHECKED on ALLOW OR DENY.

Please help............

Thanks..

Ivor

 

[Dale Howard [MVP]]

Ivor --

I believe your problem is that the PM's are included in the Executives
group. This group has pretty much blanket access to everything. Either
remove the PM's from the Executives group or change the Save Project
permission for that group as well. You should not edit the individual PM's
settings. Hope this helps.

 

[Ivor Davies]

Dale - thanks for the update and all your help!

I was also wondering if I would need to change the default security template
for this group as well (I've called it LCBO Projiect Managers)?

The permissions right now for this template is set as follows:

Allow = Checked
Deny = Not Checked

Would I also need to change the ALLOW setting to equal NOT CHECKED to
prevent Project Mangers from saving another Project Manager's project as I
previously described? OR would this cause me MORE PROBLEMS - if I checked
this box, would it mean that project managers WOULD NOT BE ABLE TO SAVE THEIR
OWN PROJECTS (projects they created / saved / published)?

Any advice on this would be greatly appreciated...

Thanks Dale!

Take Care...

Ivor

 

[Dale Howard [MVP]]

Ivor --

With your follow up question, I'm now not certain what you are attempting to
accomplish using the LCBO Project Managers group. If you wish to allow each
PM to open and save only his/her own projects, and open others' projects
read-only, then do the following:

1. Include each project manager in only the default Project Managers group
2. Make sure only the My Projects and My Organization categories are
included in the Project Managers group
3. Select the My Organization category in the Project Managers group
4. For this category, set the Open Project permission to Allow and make
sure neither Allow or Deny are checked for the Save Project permission.

As long as you have not changed any of the other defaults for any of the
individual project managers in the group, then this should create the
security environment you wish. My difficulty in diagnosing your problem
beyond the above steps lies with the fact that I cannot be certain what
other changes you have made to your security envrionment. Hope this helps.