Project Task permission in Project Management extension

[happyfriday]

How to control accessibility of project tasks for different roles?

I see Project and Project Board but not project tasks in Roles/my_role

Thanks

[lazovic]

Hi happyfriday,

You should pay attention to this section in the documentation, which describes in detail the configuration of access for projects and project tasks: https://docs.espocrm.com/extensions/...ct-level-roles.

[happyfriday]

Hi lazovic,
thank you for the response. I specifically mean the path espocrm.com/#ProjectTask:

I am able to control the permissions of /#Project from Roles > <my custom role> but I do not see it for project tasks.
My goal is to hide the Project Tasks interface from users except for the admin role. Do you know how I can achieve that?

Thank you!

[victor]

Project Tasks are not regulated by Administration > Roles > Role_name (as in the your screenshots). They are regulated separately within a specific Project by specific Project Role.



To simplify the explanation, a User will have access to those Project Tasks to which his "Project Team/ or Team/ or Members" (it's the same thing, I chose some synonyms for better understanding) has access (note that Team in Projects has nothing to do with Administration > Teams) within a specific Project. For each Project "Project Team/ or Team/ or Members" users are added separately according to the global user Role configured in Administration > Roles > Role_name (as in the your screenshots).

You can find a more detailed explanation at the link above.

My goal is to hide the Project Tasks interface from users except for the admin role

Just don't grant/deny read access to the required global Roles in Administration > Roles > Role_name (as in the your screenshots). Admin has access without any roles at all.

[happyfriday]

Hi victor thanks for you detailed explanation. I didn't know .../#ProjectTask only shows Project Tasks in projects that the user belongs to. That helps a ton. One final question: could you clarify what yo mean in the last sentence? "Just don't grant/deny read access to the required global Roles in Administration > Roles > Role_name (as in the your screenshots). Admin has access without any roles at all." What are you referring to when you say "deny read access to ..." in <some custom role>, the Project? Because as you mentioned project task is not controlled in that interface.

Thank you

[victor]

I meant that a User with the "Admin" type sees absolutely everything regardless of the Role assigned to him (the Global Role, specified in Administration > Roles > Role_name).

[lazovic]

happyfriday,

To control Project Tasks access, you need to choose/edit its roles.

Go to the Project list view, press on the three dots button in the upper right corner, and choose the Roles option. Here you can set up access to project tasks. After that, you will be able to select roles for project members directly in the project in the Members panel.

[happyfriday]

Thank you :d