Video: How Do I: Secure Work Item Areas and Iterations?

Presented:Richard Hundhausen

Explore the work item area and iteration security settings in Visual Studio Team System. Richard Hundhausen explains how to allow or deny team members from changing areas or iterations and viewing or editing work items.

The following text is a software generated transcript of the video. Click on a minute link to jump to a location within the video


Minute 0

To and the president is in a Microsoft regional Director and official studio team system and be a back in his house in the tool can implement work security by area and iteration else or is there it has been available since the first version of team foundation server 2005 and will have seen too many shops taking advantage of his granular level security however they should their times when you want a great classification areas and not allowed as anybody in the company to view and or edit the work items in those areas now do in team foundation server 2000 eggs in the secure generation of themselves as well or single bunker log in as Pam Cross administrator here and I have a benchwork steam project created its review or security settings of a woman team members are Deva developer Antonio tester and they have to have basic contributor writes of the project as a whole they can publish to a

Minute 1

Tolson started old and you will information same as anybody in the contributors group that specifically was going here and configures various iterations and again these are set ahead of time so you can classify your work items there is a way to say where the work item is associated in iterations Wednesday when full screen if you iterations and areas pumping and will keep it simple here for areas will have have an administration area lets have a oral human resources area and maybe we ll have a finance area of the way security permissions work as it is a root level here or any root level of a cascade down inherit them through the tree of the Route error in your security agency for example Dave has permissions to edit work items in this node view of his note if you were cousins roughly with these returnable

Minute 2

Other levels of her back on again Tony I m thinking she does not need the ability to edit workers and note was able to view the nodes for information as well as you all items in a close contest at this level right here closes down and will go and run another instance of Visual Studio as Dave right click run as a wonderful trick you can use to emulate a proper team are citizens of the Schwartz and robust security settings for Kim he has the ability to see here is the computer is eerie and as a community of the security settings can make any changes those already only is a problem administrator as closes down and come over here and get out of work item most critical task or for a title role creates something

Minute 3

Official on company letter showing investors up there with that doesn t very administration that also reveals the same will have say that excellent test 17 was great about a problem with a record of ham systems and safer example well you know what Dave misrouted finance political and take away some of his permissions to lose security note here and its ultimate bad days to does list of users are by default Dave picks up the inheritance permissions of the router it was witches area of the team crossed himself to want to override this in a lower level uselessly added Dave the user or the Windows group of people you want to deny the permissions or allow specific more permissions or they can be shipped server groups as well that Davis was said in

Minute 4

A Windows user and go ahead and take away his ability to edit work items in this note because of your items so somebody else like Pam for example crazy or credit and finance a vacancy at Buick but he can make changes to it closes down and come back over here and in real time if if he tries critics ask so this is going to be into a lot of health over the budget and that areas can be finance else lives into the hall has expected were getting an error TFS could not save your changes there may be a problem for a type definition more than likely you ve been denied this permission so this is become as you get home because there is a very cryptic messages and you know what you re trying to do it without permission is taken away from you he s the

Minute 5

Spur gave to the phone and ask them what s going on and will form him that in fact he has no ability to create that would have to have his days as alright all you created them if I can t have your greatest work on SoCal who has permissions because she s the part of Mr Jacob inherent habits ask you to help over the budget and she of course if they finance initial son of the day is and will say that so test 19 now I think of our careers Day is that I can go to work item jumps in 19 also like the good control chief is to control G you don t like to work on them as well and up comes a work item is of course read only because I only have a few workouts this area node a provided it is even

Minute 6

A warning message or the top tier 2000 4033 to have permission to modify one of the very finest symphonic pan to a committing changes for okay so as you can see her we got Dave set up as a security on various less restricted even more for Tony so it is reviewing the room area we got Dave who has permissions to edit in the work items as well as do the node and Tony who is read only user can only view nodes and workouts in this area so she can come along and run an instance is Tony and will have her own jokes work out of 19 as well have the same experience they ve had a moment ago appeared as all the information you look at this absence feel

Minute 7

All the details which is chemically changes to what we want to restrict Tony whose a tester from even seeing work items and that in that note solos closes down of the note here finance and go to security Robert Dave already was take away his edit capability but he still has a few run at Tony and here ever and take away her view work items as well members never had it in the first place limited by that it is a paranoid way that I the way this axis controller security works is one that I anywhere in my ownership groupings and is tonight so I doesn t hurt to check my couple times and coupled with levels is the careful of lock yourself or someone else I ll close that Job records and resistance to do the same thing again good work item 19

Minute 8

Item she gives us a message that says it does not exist or not efficient axis soap engine microphone and cold administrator and panics like her that she spent off so what is his other view on this is kind of a usually misunderstood permission to deny the intuitive view this node people would think that maybe don t see in the drop down list ago I denied the ability to view this node I wouldn t see finance of our drop down list and you know what I don t see against selective is no confusion home well you would think the works that way but it is not only leave this aware was what the setting is as to view the permissions or view the security node itself of a career as Tony and I come here to the settings I have shorter iterations I can see finance ongoing security settings for finance and I can t change anything but conservative maybe nice if I want targeted a

Minute 9

Oh you know what else I ve done for her for her taken away your grandson or anybody else who might have been denied access to that finance the area that I can go here popping the security and in addition to taking away her view accessible work items are to take weird review axis of the node altogether and that s this page years in the security information comeback overhears Tony I try to say why much of awful to have a look at the security settings offers innovations pop in here and have a block it again on Italy to view the permissions for this object is the confusing is the view of the area is doing the security page of the area that s what this commission is here no new in 2008 is this iteration touts security is what has always been hearing 2005 inches and outsource working without a greater iteration here do you hope to

Minute 10

October and will do 11 n thinking this is a lovely iteration and release schedule and it also raises oil down the road was never indicted future iteration of a work we ll are planned for the next of the current iteration can screw this generic bucket for later will again give a security button here and you got the ability to allow or deny people to does work with these nodes notice were missing the view work items in this iteration and edit the apprentice information Microsoft a fellow that was to argue in the time frame for the 2008 release sold the security settings here only apply to be iteration of themselves in other words you can t check a box here and say you can view 99 future work items you can t change them it won t allow people to edit or delete for reorder these nodes right here

Minute 11

Is important to want to have anybody with permissions to reorder the rations and a vexing and owners generation coming up that wasn t there before or deleted and that could mean a lot of work is relocated when you don t want to so as you can see you go to secure the area federation does have been created for project is for a straightforward auditor important to do nothing more teams should be doing this and turning off at access and even view access to some of the more interesting work items of a default attributes have you believe you have work items in the arena of its as will have a few very known security settings iteration security new in 2008 is a bit different holy you can view and edit data permissions is no ability to show or read only the work items and cells if I remember the summer of tracking operations or multiple permissions such as when you delete a node if I was going to grasp intuitively as future node only to give them the permission to edit the node as well as delete them and

Minute 12

A combination of the two permissions to multiply that number automation should refer to the MSDN article named team foundation server permissions for more information so a return doesn t present an excess in a Microsoft regional Director and studio team system MVP that it

Click here to go to original video page