Is it possible to limit permissions on certain fields within a Work Item Type?

Question

All,

My project team is letting a group of testers pass/fail test within Test Cases within TFS via the Visual Studio 2010 Team Web Access portal.

 

The business owners of the system were a fan of this but had concerns about their user's having access to more than the fields they are required to edit.

My Requirements are below:

- There will be two user groups. Each user group will have different permissions.

User Group one:

- will have full control over the Test Case Work item type. They can modify any field within this work item type.

User Group Two:

- This user group needs different permission levels for seperate fields within the Test Case Work Item.

- They need the ability to edit certain fields such as (Tester comments, Pass/Fail, and Assigned to).

- They also need read only access to other fields (Test Case Steps, Test Case Priority, Test Case Area, Test Case Title).

 

Is this possible to do in Visual Studio? I really appreciate any feedback thank you. 

 

Answer 1

Hi Richard,

Thank you for your post.

According to your description of the issue, I suppose you want to restrict permission for some fields of Test Case work item type. If I have misunderstood anything, please free feel to let me know.

I suggest you restrict Rules for specific fields by using Process Editor.
1. Install TFS 2010 power tools.
2. Add user group to TFS.
3. Open Test Case WIT. Tools-->Process Editor-->Work Item Types-->Open WIT from server, select the team project and WIT.
4. Restict read only permission. Take Steps field for example, double-click Steps field-->Rules tab-->New-->select READONLY rule-->OK-->in For, select the group you want to set read only permission-->OK.

5. Save the WIT.
6. You can restrict other field permission like above steps, in Rules, For means this rule is apply for this group, Not means this rule is not apply for this group.
7. No matter open work item from Team Explorer or web access, the field rule will applied.

I hope this information will help resolve this issue.
 
If anything is unclear, please free feel to let me know.

Best Regards,

---

Lily Wu [MSFT]
MSDN Community Support | Feedback to us

Answer 2

Hi Richard,

How about the issue now?

If anything is unclear, please free feel to let me know.

Best Regards,

---

Lily Wu [MSFT]
MSDN Community Support | Feedback to us

Answer 3

Hi,

Do you have any idea how do I set the above permissions to Team Project Groups level?

When I work with power tools, I can only see the Collection Groups:  [Global]\Readers, For example.

Is there a [Local]\Readers or something I can use in order for this rule to apply in Team Project level?

---

omerp

Answer 4

OK, I have an answer to my own question -

In the Power Tools editor, instead of [Global] use [Project]

If you're updating the XML file of the WIT,  instead of [global] use [project]

---

omerp