在TFS工作项目“分配给”中管理用户。领域 [英] Managing users in the TFS work items "Assigned To" field

问题描述

因此，我知道围绕该主题有几篇文章，但我认为他们还没有深入到此！

所以我的问题是，当我在TFS中创建一个新的工作项时，可以为其分配的用户包括 NT Authority\Local Service （这也是TFS服务帐户）。我不是在问为什么，因为我知道默认情况下此字段由有效用户组填充，并且在检查这些组后，我可以看到组权限层次结构如下：

 ->有效用户
->项目集合管理者
->项目收集服务帐户
-> NT Authority\本地服务
  

而且您无法更改项目收集服务帐户中的任何内容，因此当然，默认情况下，每个人的分配给字段中都有该用户吗？因此，这是否意味着每个人都接受它，还是他们修改了流程模板以将其过滤掉（请参阅博客

对我来说有点奇怪默认情况下尚未过滤掉！显然，我也不想从任何权限中删除它（即使可以），因为我担心它以后会引起问题。

因此正在过滤在流程模板中是唯一的方法（看起来需要一些维护），还是有更简单的方法？

解决方案

在TFS2008下，您确实需要这样做。在2010年之下，可能会有一个排除项，但目前我无法检查。

要避免进行大量维护，请改成在单独列出每个用户的情况下，我们所做的只是将列表从有效用户缩减为主持人和贡献者。我们知道我们可以控制这些组而不影响服务权限：

 < FIELD name = Assigned To refname = System .AssignedTo type = String reportable = dimension> 
< ALLOWEDVALUES expanditems = true> 
< LISTITEM value = [Project] \贡献者 /> 
< LISTITEM value = [Project] \主持人 /> 
< / ALLOWEDVALUES> 
< / FIELD> 
  

So I know there have been a couple of posts around about this topic, but I don't think they've quite got to the bottom of it!

So my problem is that when I create a new work item in TFS, the users which I can assign it to include NT Authority\Local Service (which is also the TFS service account). I'm not asking why, as I know that this field, by default is populated by the Valid Users group, and upon inspecting the groups, I can see that the group permissions hierarchy looks like this:

 -> Valid Users
   -> Project Collection Admistrators
      -> Project Collection Service Accounts
         -> NT Authority\Local Service

And you can't change anything in the project collection service accounts, so surely by default, everyone has this user in the assign to field? So does this mean everyone accepts it, or do they modify their process templates to filter it out (see the blog here)?

Just seems a bit odd to me that by default is isn't filtered out already! Clearly I don't want to be removing this from any permissions either (even if I could) as I'm worried it'll cause problems later.

So is filtering in the process template the only way (which looks like a bit of effort to maintain), or is there a simpler way?

解决方案

Under TFS2008, you do need to do it this way. Under 2010, there might be an "exclude", but I'm not able to check that at the moment.

To keep from having a whole lot of maintenance, instead of listing each user individually, what we did was just pared down the list from "Valid Users" to the "Moderators" and "Contributors". We know that we can control those groups without affecting service permissions:

        <FIELD name="Assigned To" refname="System.AssignedTo" type="String" reportable="dimension">
            <ALLOWEDVALUES expanditems="true">
                <LISTITEM value="[Project]\Contributors"/>
                <LISTITEM value="[Project]\Moderators"/>
            </ALLOWEDVALUES>
        </FIELD>

这篇关于在TFS工作项目“分配给”中管理用户。领域的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！