Welcome to the Axosoft Community, Sign in | Register | Help
in Search

Assigning multiple security roles - are privileges additive or subtractive?

Last post 05-20-2008, 8:59 AM by Bren rueb. 2 replies.
Sort Posts: Previous Next
  •  05-15-2008, 7:36 AM 15770

    Assigning multiple security roles - are privileges additive or subtractive?

    I've got a user assigned to the project manager role that was initially set up in the sample/initial setup and he's also assigned to a new developer role for certain projects. The new role has the global right of link items, but the project manager role did not. The user was working within the project that he has the developer role permissions in, but he was still not able to relate items until I granted the right to the project manager role.

    Most of my users have multiple role assignments - some projects they can view data only, and some they can do everything but delete, but in the projects where they can do everything, they can't move items between the subprojects unless I change their assignments to drop the projects where they can only view. I can't find a global "move items" privilege, so is this also doing a subtractive permission check?

    I've gone thru the user manual, to find out about specific permissions, and it refers to the admin guide to get more specific info. However, security doesn't show up in the index or anywhere else that I can find, so is this information somewhere else?

    Brenda 

    Filed under:
  •  05-20-2008, 8:02 AM 15790 in reply to 15770

    Re: Assigning multiple security roles - are privileges additive or subtractive?

    The global privileges should be additive, so if one role has the permission than that user should have the permission.  So that user should be able to link items in any of the projects they have access to.

    Project-level permissions are neither additive nor subtractive, they only apply to the projects selected in that role.  So if the users are trying to move items from projects they can edit to projects they can only view they will not be able to.

    What version of OnTime are you running?  I've just tested the link permission with OnTime 2008 and it works as expected.


    Dan Suceava
    http://www.axosoft.com
  •  05-20-2008, 8:59 AM 15796 in reply to 15790

    Re: Assigning multiple security roles - are privileges additive or subtractive?

    Dan,

    I'm on 8.0.2.7604. Thanks for the information, I'm passing it on to the users. I'm also not sure if it isn't just some confusion of how to do moves, etc. So, I guess I need to go see how they are trying to use it when they are trying to move items and relate items.

    Brenda

View as RSS news feed in XML

© 2002 - 2007, Axosoft, LLC. All Rights Reserved. | Privacy
Bug Tracking | Defect Tracking Videos | Help Desk Software