Project Management: Best Practice for project permissions?

[DanielS]

We are just setting up the project management extension and we are wondering how we should setup the permissions settings.

Our use case:

• Every user shall have read access to all projects
• Only team members can see the tasks (and subtasks) of a project
• Exception: a project can be classified as "Confidential" --> then only the added project team members can see, read and edit in the project (and project tasks)
• Some users (our board of management) shall have read and comment access to all projects and project tasks, even if the project is classified as "Confidential" and the user has not been added as a team member (because the board of management is not part of the team).

Any suggestion how to do that?

[victor]

There is no such possibility, since there is no classic Team in the ProjectTask entity. All participants of a certain Project will see all Project Tasks depending on their Project Role and if they are added to the "Team" (not the classic one, namely Team -> Members).



And if the User is not an Admin and has not been added to Team -> Members, then he will not see Project Tasks at all.