on 11-23-2014 5:58 PM
We have a case where we want to restrict access in the project structure to subproject only.
We receive following error in Project management for project structure:
Project “x”: no display rights
Notification due to reference object “x”
User has the key user and analyze ACL defined in user tab for the subproject of a project. No access has been assigned to the main project.
The notification does not prevent the visibility to subproject.
User does not have authorization in the backend for ACO_SUPER object, since we must limit the access to the subproject only.
Does anyone know that to which reference object does this notification refer to? And what access in ACL settings or in backend is needed to remove this message, besides ACO_SUPER?
Hi Minna,
not really clear about your situaion. Is the project 'X' the main project or the subproject? Which authorization does the user have regarding main project and subproject.
Very simple rule: from ACL point of view, main project and sub project are independent objects. The authorization is NOT inherited from main project to subproject.
P.S: the (main- or sub-project ) are the root-object from acl point of view.
Kind regards,
Zhenbo
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
no, it is in standard not possible. As the user access the sub project, the data of master project get retrieved. See 'Task that belongs to master project'. To get such data of master project, the user surely need have the 'read' authorization of master project.
Hidden the fields in the UI does not help. If you want to avoid such messages, an enhancement need to be done. By which either skip the retrieval of the master project data or de-active the authorization check for the retrieval action.
Kind regards,
Zhenbo
User | Count |
---|---|
8 | |
7 | |
3 | |
2 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.