Need to grant all but one user read-only access
Article ID: 100218
Updated On:
Products
Issue/Introduction
I created a new project in which the team only wants one individual to have write access. What would be the best way to accomplish this goal?
Environment
CA Harvest SCM all versions and platforms.
Cause
There are several processes in Harvest that would result in a new version being added to the project's repository:
- Check Out for Update/Concurrent Update
- Check In
- Move/Remove/Rename Item
- Move/Remove/Rename Path
- Concurrent/Interactive/Cross Project Merge
And there are other processes that you would not want a read-only user to perform as well, such as:
- Delete Version
- Create Package
- Switch Package
To restrict a user to read-only access you would remove the "Public" user group and their user group from the Execute Access list for these types of processes.
Resolution
For the user to which you want to grant read and write permissions, you would grant execute permissions on all the necessary processes to accomplish this, such as Check Out for Update/Concurrent Update, Check In, Delete Version, etc.
For the users to which you do NOT want to grant these permissions,
- Ensure that the "Public" user group and the read-only user's group is not granted access to any of the above processes in any state in the project
- Grant the read-only user's group execute permission on the Check Out for Browse process in every state only.
Additional Information
There is an SQL report that you can run to get a listing of all permissions granted to each user. Here is the article that explains: Finding which permissions are granted to each user
Feedback
