index > Team Foundation Server - Administration > Project Security Defect?

Project Security Defect?

Security Settings:

Server Group: [SERVER]\Team Foundation - SQA

The users are in this group are a domain group: G_TFS SQA

Permission's: Allow Create a Workspace and View server-level information

I then add the [SERVER]\Team Foundation - SQA to the project security dialog window and grant the following security:

Allow Edit Build Quality, Publish Test Results, Start a Build, and view project level information

Results: When a user in the SQA group goes into teamplain they can see reports, source code, and documents all correctly. The issue is on the work items tab. The user can see all the Queries but when they run the queries they get zero results.

If I take this same group and include them in the default project group [Project]\Contributors the users are able to return all items in the queries.

Is there a setting I need to have differnet to allow the server groups to be able to run the queries?

Dan-Teklynx

Yes. Work Item Tracking is secured at the area path level. Basically you can set the permissions on who has the ability to read and edit work items (amongst other things) under a particular area path node (and its children).

If you go right click [Project]->Team Project Settings->Areas and Iterations..., select a node (maybe the top-level node for example) and then click on the "Security..." button, you'll see the area node security dialog. You can take a look at the setting that you have for [Project]\Contributors and mirror that for your "Team Foundation - SQA" server group. You can lock down certain areas of the area classification tree to certain members of your team if you so desire.

Out of interest - is there a reason why you're using a server level group rather than a project level group for you project users?

Thanks,

Dan Kershaw [msft]

Dan Kershaw

reply 2