nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Permission Schemes/Project Roles/User Groups

David Kiellar

So i have two projects. Two project roles (Project_Admin and Project_User). Created two user groups (users_programA and users_programB).

So I added a user, added him to users_programA user group. users_programA user group has the project role of Project_User.

I have a default permissions scheme that has the project role of Project_User to create, edit, view issues, etc.

When the user logs in, he can create an issue, but then cant view it or anything. Do I have to assign that permissions scheme to the user group and if so, how do i do that?

Accepted answers

Nic Brough -Adaptavist-

No, permissions are all project related, nothing to do with groups.

It sounds like you have everything set up correctly, but I'd go over it VERY carefully. I.e.

User is definitely in the group users_ProgramA
The group users_ProgramA is definitely in the role of Project_User, in ProjectA
ProjectA is definitely using the default permission scheme
The default permission scheme definitely has Role(Project_User) able to Create, Edit, View etc

(I suspect the problem is line 3 or 4 to be honest)

Except...

Are you using any form of "security scheme"? That could break all the generalised stuff above quite spectacularly and it's the only thing I can think of that you haven't mentioned!

All comments

Nic Brough -Adaptavist-

No, permissions are all project related, nothing to do with groups.

It sounds like you have everything set up correctly, but I'd go over it VERY carefully. I.e.

User is definitely in the group users_ProgramA
The group users_ProgramA is definitely in the role of Project_User, in ProjectA
ProjectA is definitely using the default permission scheme
The default permission scheme definitely has Role(Project_User) able to Create, Edit, View etc

(I suspect the problem is line 3 or 4 to be honest)

Except...

Are you using any form of "security scheme"? That could break all the generalised stuff above quite spectacularly and it's the only thing I can think of that you haven't mentioned!

David Kiellar

Thank you, I will take a look again at what you suggested. I do not have any security schemes

David Kiellar

Ok, so following you.

1. User is definitely in group users_programA

2.I go to Projects > ProgramA > People. Project Role Program Users is listed and in that row under groups is says users_ProgramA.

3.I go to Projects > ProgramA > Permissions and Default Permission scheme is showing.

4.If i view the default permission screen, it has the project role Program Users is show on almost everything.

Nic Brough -Adaptavist-

Ok, that's sort of good - you have set up everything correctly. Only thing I really missed is that on line 4, I should have said "check the 'browse' line most carefully" - not too worried about the others, but 'Create' and 'Browse' are the important ones for this question. The check here is not quite that they are the same, but that every user/group who has 'create' is in 'browse' as well (don't care if the 'browse' permission has more users/groups in it, just that everyone who can create, can browse too)

The only other thing to check is that the user is logged in correctly (not anonymous), and doesn't have duplicate accounts mixing it up - get them to click on their profile and list off their user login and all the groups they're in.

If that's all correct, then I'm completely stuck, unless you've got some extra security plugin or something.