User authorizations in PWA and underlying Sharepoint Services

[Huckey]

Hi,
I have MS Project Server 2007 on MS SQL Standard 2008 with
underlying Sharepoint Services 3.0.

I have created a project with subprojects and each of them has a
project workspace provisioned. Subproject's workspaces are provisioned
as sub workspaces for the main project.

Since it is different group of people working in each subproject I
have different users authorized to access each project workspace. All
users from all workspaces have though access to the workspace of the
main project. On both levels users have Contributor rights.

I have however two problems with my setup:
1. Users can access project workspaces they are authorized to. They
can see documents stored there and they can access the Issue list we
use there. However when they click on a particular issue to see its
details they get an "Unexpected error" message. Logs on the server
show a 401 error (no authorization for a SOAP object).

2. Users can not access the main Project Web Access page despite them
having Contributor rights set in Site settings. They get an error
message saying they are not authorized to access this page.

These users are NOT set as resources in Project Server. Therefore my
questions:
1. I assumed that PWA and SharePoint services are somehow separate
environments (though working together) and that one can have different
user rights in both. Specifically I assumed that a user may be
authorized to access Sharepoint Services but not be authorized to
access PWA. This is possible (see my problem #1 above) but righ now
results in the users not being able to see details of issues in the
system. Do users in Sharepoint Services have to be defined as
Resources in Project Server in order to be able to edit details of
Issues in SharePoint Services Project Workspace?

2. Looking to the question above - would the situation be different if
the site on Sharepoint Services wasn't a Project Workspace?

3. Is it so that users can not access the main page of Project Web
Access unless they are defined as Resources?

Thank you!

Best regards

Huckey

 

[Huckey]

Hi again,
I have just discovered another thing. If a user in a project
workspace has only Contributor rights he/she can not create new
documents or issues. However when the user has Contributor + Team
member rights, then he/she can create new documents and view the issue
list BUT still gets an "Unexpected error" when trying to create a new
issue or go to details of an existing one. Only adding this user as a
Resource in PWA lets him/her work without problems.

I have come across this article: http://technet.microsoft.com/en-us/library/cc197668.aspx.
It says among others:
"There might be a circumstance where you want to grant people who are
not members of the project access to the project workspace site.
Anyone assigned to the Web Administrator group can create new users
for a project workspace site. In addition to the four groups mentioned
above, there are four default Windows SharePoint Services groups. They
are:
* Full Control Has full control.
* Design Can edit lists, document libraries, and pages in
the Web site.
* Contribute Can view pages and edit list items and
documents.
* Read Can view pages, list items, and documents.
"

From this article I would understand that what I want to achieve (have
users who can work with project workspace but who are not members of
the project team and who can not access PWA) should be doable.
However, I keep getting the "unexpected error" message.

Do you have any ideas where I should look?

Thanks!

Huckey

 

[aeberhar]

Check this out
http://www.eggheadcafe.com/conversation.aspx?messageid=34890911&threadid=34890911

Seems to imply that the problem isn't fixable.