Gerrit project access allows users to remove the users from gerrit project - gerrit

My Gerrit Version is -2.10.2
Regarding an Gerrit group (Delete user permission), I am the Gerrit administrator, I have user add/delete permission for Gerrit groups. Today I noticed that even the users who all have access to Gerrit group, are also able to remove users from Gerrit group. I thought, only admin can perform the manage groups and users permissions, whereas it is working for user as well. I have checked the project it has configured the access from “Rights Inherit From: All-Projects” also “Project All-Projects” it has below settings.
Global Capabilities
Administrate Server -
Allow - Administrators
Priority -
Batch - Non-Interactive Users
Stream Events -
Allow - Non-Interactive Users
Could you let me know where I can configure the permission, So that user should is not allowed to remove the user from Gerrit group. Only Gerrit administrator need to have users add & delete permission from Gerrit groups.

Check the following:
Click on the "General" tab of some group.
Look at the group in the "Owners" field
All users that are members of the owner group (or members of one of its sub-groups) has the permission to add and remove users to original group.
Put the administrator group (or other group you want) in this field and click on the "Change owner" button.

Related

Granting only board access in Azure DevOps

Is there any way to grant only board access to Azure DevOps (TFS) users without showing Repo's (codes)?
Yes. In the Project Settings-Permissions, click New Group and create a new group, add the users you want to "grant only board access to Azure DevOps".
Then, in this group's Permissions, set all the permissions to "deny" accept those in the Boards( these you can set to "Allow").
without showing Repo's (codes)?
As for this requirement, you need to go to the Project Settings-Repos-Repositories, select the target groups or users, set the "Read" permission to "Deny". After this, the group members or users can not see the repo file anymore.

Why is one user able to assign a code review, but another cannot?

Having upgraded to Plastic SCM version 8.0.16.3533, one user who can assign code reviews, another can't.
The users each have two domain accounts using the same user ID, i.e. domain1\userID and domain2\userID. I've ensured the users old domain account have been deactivated. They both have active licences and are in a group assigned to the repository permissions.
No code
All users are able to assign code reviews.

Agent role isn't permitted to edit users

In "App Store Connect -> Users and Access" I'm trying to add an app to some user.
When I'm trying to save changes I get error:
"Your account doesn’t have permission to edit other users. Contact your team agent for more information."
The problem is that I'm the admin in App Store Connect and agent in the corresponding apple developer program account.
Ok, so in order add permissions for some app to a user I've needed to change his/her role then return previous role and after that add the app. It allowed me to save the changes.
You can checkout for your role under the People Section of the developer account.
Login to Developer Account
Click on People tab on right side.
Checkout your role and see, if you are agent and admin for that team.
Possible reason for this to happen is:
You are having multiple developer account or some one has added you as the admin to their team. And when you tries to login with your developer id and password, you may be redirected to that team, in which you role as admin only.
So, choose the appropriate team by clicking the right down arrow, besides your Name in https://appstoreconnect.apple.com
Must be a bug,
if you un-check and re-check user role at same time you adding new apps bypass the permissions.
I believe should be Apple reported.

Create meta-task TFS15 RC1

When I try to create a meta-task in TFS15 RC1 the following error come on;
Access denied. [username] needs Edit meta-task permissions to perform the action. For more information, contact the Team Foundation Server administrator.
The user in question is a superadmin of TFS15.
You are lack of the related permission, you can give the permission follow below step:
Open Meta-task under Release hub in your team project
Right click Meta-task select Security
Either add your account in one of the groups or directly add your
User ID (click Add...-Add Windows identity)
Note:
Please make sure the permission for Edit meta-task of your
account or the TFS group has been set Allow.
When you add the new user ID under the users, you need to change
permission (such as Not set-Allow) and save changes. Otherwise,
the user will disappear.

How to give\restrict check in and check out permissions for specific user in TFS 2010?

Is there any ways to give permission to one particular user for check in and check out without creating groups?
Yes you can select Add Windows user or group directly to the current permission level: In the Project Security dialog box, Choose “Windows User or Group” in the “Add users and groups” section. Then click “Add” to add the Windows user/group.

Resources