cancel
Showing results for 
Search instead for 
Did you mean: 

Project and portfolio management ACL issue

Former Member
0 Kudos

We have a case where we want to restrict access in the project structure to subproject only.


We receive following error in Project management for project structure:
Project “x”: no display rights
Notification due to reference object “x”

User has the key user and analyze ACL defined in user tab for the subproject of a project. No access has been assigned to the main project.

The notification does not prevent the visibility to subproject.
User does not have authorization in the backend for ACO_SUPER object, since we must limit the access to the subproject only.

Does anyone know that to which reference object does this notification refer to? And what access in ACL settings or in backend is needed to remove this message, besides ACO_SUPER?

Accepted Solutions (0)

Answers (1)

Answers (1)

former_member201206
Active Contributor
0 Kudos

Hi Minna,

not really clear about your situaion. Is the project 'X' the main project or the subproject?  Which authorization does the user have regarding main project and subproject.

Very simple rule: from ACL point of view, main project and sub project are independent objects. The authorization is NOT inherited from main project to subproject.

P.S: the (main- or sub-project ) are the root-object from acl point of view.

Kind regards,

Zhenbo

Former Member
0 Kudos

The error message refers to the main project = project "X". The subproject accesses are working correctly, but what we want to achieve is to get rid of this message. As said, the option is not to assign access to the main project, the user only needs subproject access.

former_member201206
Active Contributor
0 Kudos

Hi,

no, it is in standard not possible. As the user access the sub project, the data of  master project get retrieved. See 'Task that belongs to master project'. To get such data of master project, the user surely need have the 'read' authorization of master project.

Hidden the fields in the UI does not help. If you want to avoid such messages, an enhancement need to be done. By which either skip the retrieval of the master project data or de-active the authorization check for the retrieval action.

Kind regards,

Zhenbo