Forum Discussion

barakbe's avatar
barakbe
Copper Contributor
Mar 04, 2022

Deny permission doesn't work as expected

I have a customer working on project server 2016.

 

  1. I added a project to a category named Projects_DENY
  2. I added a user to a group named Projects_DENY
  3. For group Projects_DENY I chose category Projects_DENY and set DENY on all project actions
  4. I entered the project from project center
  5. I gave the user all individual permissions to the project
  6. I started a delegate session as the user
  7. I went to project center and saw the project. This is NOT AS EXPECTED since he has a DENY on view project summary in project center. Through the association to group and category
  8. I clicked on the project name and got access denied. This is as Expected

 

I tried to reproduce in my own Project Online environment, except that I gave the user a direct DENY on the category instead of through a group.

 

The result was even worse. In step 8 the user saw the project schedule.

 

I thought that when a DENY is given, it's stronger than any contradicting ALLOW. Isn't it so?

 

Barak   

1 Reply

  • Dale_HowardMVP's avatar
    Dale_HowardMVP
    MVP
    Mar 04, 2022
    barakber --

    If you are a Global Administrator in your organization, then the Delegation session will apply YOUR permissions and not the permissions on the user you are impersonating. Might that explain what you are seeing? If so, the best test for the Deny settings would be to work directly with the user in question, and to ask him/her to see if the Deny permissions are working. Hope this helps.

Resources