Security - PM who is TM on other project has read/write access

K

Kelly O

Currently, our security settings allow a Project Manager who is assigned as a Team Member on other projects has read/write access to those projects in MSP 2003. We are not aware of anyway this can be corrected, and in fact, is a design issue.

Can anyone enlighten me as to how we can either prevent a PM from seeing the other projects, or at least limiting him/her to read only access?

Thanks
 
D

Dale Howard [MVP]

Kelly --

To limit a project manager's access to only those projects that he/she
manages, complete the following steps:

1. Log into PWA with administrator permissions
2. Click the Admin menu
3. Click the Manage security link
4. Select the My Projects category and click the Modify category button
5. In the Projects section, select only the "Allow users in this category
to view all projects they manage" option and deselect all other options in
this section (the second option is the source of your problem)
6. Click the Save Changes button

Hope this helps.

--
Dale A. Howard [MVP]
Enterprise Project Trainer/Consultant
Denver, Colorado
http://www.msprojectexperts.com
"We wrote the book on Project Server"


Kelly O said:
Currently, our security settings allow a Project Manager who is assigned
Click to expand...
as a Team Member on other projects has read/write access to those projects
in MSP 2003. We are not aware of anyway this can be corrected, and in fact,
is a design issue.
Can anyone enlighten me as to how we can either prevent a PM from seeing
Click to expand...
the other projects, or at least limiting him/her to read only access?
 
J

John

Dale,
I have a similar question. I understand how you restrict PM's access to
projects in Project Pro as you describe, but I was talking to a guy who said
their PS 03 installation is such that a PM can see other PM projects in
Project Pro when they select Open, but they are grayed out and can only be
opened Read Only. They can open the projects that they own Read Write, but
only Read Only for all others. I have searched to see how this can be done.
Is this possible and how does one do this?
 
D

Dale Howard [MVP]

John --

Here's how:

1. Log into PWA with administrator permissions
2. Click the Admin menu
3. Click the Manage users and groups link
4. Select the Project Managers group and click the Modify Group button
5. In the Categories section of the page, select the My Organization
category on the right
6. In the Permissions grid below the Categories, set the Open Project
permission to Allow
7. Make sure the Save Project permission is set to neither Allow or Deny
8. Click the Save Changes button

Hope this helps.
 
J

John

Dale,
Thanks, I will check it out.

Dale Howard said:
John --

Here's how:

1. Log into PWA with administrator permissions
2. Click the Admin menu
3. Click the Manage users and groups link
4. Select the Project Managers group and click the Modify Group button
5. In the Categories section of the page, select the My Organization
category on the right
6. In the Permissions grid below the Categories, set the Open Project
permission to Allow
7. Make sure the Save Project permission is set to neither Allow or Deny
8. Click the Save Changes button

Hope this helps.
Click to expand...
 
J

John

Dale,
I have encountered interesting phenomena when making the changes. One PM
has the desired outcome in Project Pro but now has lost access to see
projects in PWA. He is both a Team Member and a PM. Team Members can view
projects where they are in the resource pool. I would think by having this
individual in both groups that he would see his projects in PWA. Any
thoughts?
Thanks,
John
 
D

Dale Howard [MVP]

John --

I have no idea what changes you have made to the defaults for any Group or
Category. Have you checked a Deny setting somewhere in the Permissions or
Global Permissions sections?
 
J

John

I apologize, for I know you don’t have access to what I am doing, but I think
I have figured it out. What I had done was set My Projects category to allow
PM’s to only see projects they own. Then within Project Managers Group, I
added My Organization and selected only the Open Projects category setting.
After doing this, this one PM called and said he could see anything in
Project Center.

What has happened is that I have a Project Center view for My Tasks as
Summary but for My Projects there are Summary, Work, and Tracking. What has
happened is that the PM can see his projects when he selects Summary within
Project Center, but gets an error saying Project information has not been
published when he selects Work or Tracking.

I would think that a PM should still see the Project Center views but it
appears this is not the case.

P.S. I don’t use the Deny setting in the security setup only at the site
level.
 
Top