Project Task permission in Project Management extension

[happyfriday]

How to control accessibility of project tasks for different roles?

I see Project and Project Board but not project tasks in Roles/my_role

Thanks

[lazovic]

Hi happyfriday,

You should pay attention to this section in the documentation, which describes in detail the configuration of access for projects and project tasks: https://docs.espocrm.com/extensions/...ct-level-roles.

[happyfriday]

Hi lazovic,
thank you for the response. I specifically mean the path espocrm.com/#ProjectTask:

I am able to control the permissions of /#Project from Roles > <my custom role> but I do not see it for project tasks.
My goal is to hide the Project Tasks interface from users except for the admin role. Do you know how I can achieve that?

Thank you!

[victor]

Project Tasks are not regulated by Administration > Roles > Role_name (as in the your screenshots). They are regulated separately within a specific Project by specific Project Role.



To simplify the explanation, a User will have access to those Project Tasks to which his "Project Team/ or Team/ or Members" (it's the same thing, I chose some synonyms for better understanding) has access (note that Team in Projects has nothing to do with Administration > Teams) within a specific Project. For each Project "Project Team/ or Team/ or Members" users are added separately according to the global user Role configured in Administration > Roles > Role_name (as in the your screenshots).

You can find a more detailed explanation at the link above.

My goal is to hide the Project Tasks interface from users except for the admin role

Just don't grant/deny read access to the required global Roles in Administration > Roles > Role_name (as in the your screenshots). Admin has access without any roles at all.

[happyfriday]

Hi victor thanks for you detailed explanation. I didn't know .../#ProjectTask only shows Project Tasks in projects that the user belongs to. That helps a ton. One final question: could you clarify what yo mean in the last sentence? "Just don't grant/deny read access to the required global Roles in Administration > Roles > Role_name (as in the your screenshots). Admin has access without any roles at all." What are you referring to when you say "deny read access to ..." in <some custom role>, the Project? Because as you mentioned project task is not controlled in that interface.

Thank you