onedev/server

#1505 All Users can see all projects

Closed

Activities

Gibran Ortega Cruz opened 9 months ago

I have added some groups and added authorized projects for each group, i have assigned some users to each group but all users can see all projects, even if I set an autorized project to a specific user, that user can see all projects.

Am i doing something wrong, or this is the way this works?

Robin Shen commented 9 months ago

There are two reasons for this:

You've specified default role of root project to be accessible. All child projects will inherit this default role.
You've specified login group in Administration / Security Setting and that group can access all projects

Please note that permission in OneDev is additive, that is, OneDev collects all permissions from all sources of an user to get the max permission.

Gibran Ortega Cruz commented 9 months ago

I got it working now, thanks for the explanation.

Robin Shen changed state to 'Closed' 9 months ago

Previous Value	Current Value
Open	Closed

Type	Bug
Priority	Normal
Assignee	Robin Shen
Affected Versions	8.6.11
Labels	No labels

Issue Votes (0)

Watchers (4)

Reference

onedev/server#1505