防止所有用户能够在TFS/Visual Studio Online中查看所有用户，团队，组和迭代 [英] Prevent all users being able to see all users, teams, groups and iterations in TFS / Visual Studio Online

问题描述

我正在尝试按照这个家伙.我可以控制工作项和源代码管理文件夹的可见性，但不能控制迭代，团队，组和成员的可见性.说我有团队项目作为几个子项目的父项目.Project1_Group仅具有访问Project1_Area和Project1_Foler等的权限.

I am trying to implement a single Team Project with multiple sub-projects as recommended by this guy and this guy. I can control visibility of work items and source control folders but I cannot control visibility of iterations, teams, groups, and members. Say I have Team Project as the parent project of several sub-projects. Project1_Group has permissions only for accessing Project1_Area and Project1_Foler etc.

我将User1放置在Project1_Team和Project1_Group中，并且按预期该用户只能看到该区域内的工作项.但是User1可以转到其管理"页面，并查看为顶级团队项目"定义的所有迭代，团队和组.通过查看当前Team Project中每个用户的成员身份，User1甚至可以查看Team Project外部存在的组.

I place User1 in Project1_Team and Project1_Group and as expected that user can only see work items within that area. But User1 can go to their Administration page and see all iterations, teams and groups defined for the top level Team Project. User1 can even see groups that exist outside the Team Project by viewing the membership of each user within the current Team Project.

这是很多信息.据我所知，我可以授予用户的最低PROJECT-LEVEL权限是查看项目级信息"(或命令行中的GENERIC_READ).没有这个，用户将得到一个500错误.有了它，他们就可以访问上面的所有信息.是否有较少的项目级别权限，该权限将允许完全访问相关区域，但拒绝对高层团队项目信息的读取访问权限?

This is a lot of information. As far as I can tell, the minimum PROJECT-LEVEL permission I can give to a user is "View project-level information" (or GENERIC_READ at command line). Without this a user gets a 500 error. With it they get access to all information above. Is there some lesser Project-level permission that will allow full access to the relevant Area but deny read access to high level Team Project information?

推荐答案

不，我认为这不可能.如果您有权访问团队项目，则可以看到迭代，团队和组.如果您想许可项目组中的所有内容，我认为创建单独的团队项目是唯一的解决方案.

No I don't think its possible. Iterations, teams and groups will be visible if you have access to the team project. If you want to permission everything in your project group I think creating separate Team Project is the only solution.

这篇关于防止所有用户能够在TFS/Visual Studio Online中查看所有用户，团队，组和迭代的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！