How do I hide my source folders from users that belong to a particular group? I tried this, but it didn't work for me.
In source control explorer, right click on the folder you want to hide and select Security (under Advanced). There you should be able to set a deny permission for read for the team/group that you want.
Related
I would like to know how I can secure an Area (folder within project) - i.e. give access to external consultants for reading and writing.
But I do not want them to be able to access other folders within that Project.
I know how to assign access to the folder (defined Area), but I'm not sure how I can safely remove their rights on the Project without cutting off their access to the folder (Area).
Any help appreicated.
It depends wither you mean Area Paths or Source Control folders.
!!Source Control
In TFVC you can open the web access and go to the code tab. There you can right click on any folder and select permissions. Her you can use any fine grain you like and control inheritance.
In Git you can only control permission ls at the Repository and Branch level.
!!Work Item Tracking
If you open the web access and go to the administration section (cog on top right) and then the Area Path tab you can control the permission in the same way you can with source code. If you have VSTS or TFS 2015 Update 2 you can also control inheritance.
!!Real solution
However any sort of compartmentalisation comes with significant overhead of managing it. If you are a defence company or bank and there is that one folder that you don't want externals to have access then it's easy. Remove inheritance for that folder and only allow specific access.
Anything more and you run into complexity and friction for users. Ultimately you should trust everyone you give access to your Team Project. Ifnuoy don'ttrust them, then don'tgive them access...
Go to the Administer Server page and create a new TFS user group.
Add the users to the TFS user group.
Go to the Code screen, right click the folder and choose Security. Next add the TFS User Group you create and give them the rights you want:
Is it possible to create a TFS Group / role where users in that group can only manage work items but not check in code?
If so, how would you go about doing this and what permissions does this role need?
I want this for my Project Managers / Business Analysts.
To enable permissions to manage work items, please go to Settings in Team Explorer and select Work Item Areas and Work Item Iterations.
Then on the admin/_areas page (like http://servername:8080/tfs/DefaultCollection/Agile/_admin/_areas), right-click the Area and select Security. Set the Edit work items in this node and View work item in this node to be Allow. You then should do the similar settings to Iterations.
To disable permissions to access source control code: right click the project in Source Control Explorer and select Advanced -> Security to deny source control related permissions:
We have a partner on our project who needs to be able to view TFS work items via the web interface, but we do not want them to have access to view our source code. It seems like it's possible to switch the scenario (access to source control, but not TFS tasks), but I'm not sure how to configure this. Any ideas?
Definitely. The source control permissions can be maintained separately. Go to the Source control explorer, right click on the team project > Advanced > Security. Click on the Readers group and remove the "Read" permission.
Mike
Is ther a way in TFS 2010 to prevent other users from perfroming a get on a config file that is only to be avaliable for the build process?
Each user is supposed to have their own versions of the files on theier own workstations.
BR
Johan
There are a couple of ways to do this.
you can get each developer to "cloak" the file in their workspace.
Open Source control Explorer and select the "WorkSpace" dropdown
Select "WorkSpaces"
Click on the Edit button
in the "Working Folders" area at the bottom of the screen add a new row, The Status should be "Cloaked" and the "Source Control Folder" should point to the folder or file you want to ignore (you can only navigate to a folder in the "Wizard" but you can add a file manually)
Using Security permissions
Navigate to the file in source control explorer
Right click on the file and select "Properties"
Select the "Security" Tab
Uncheck the "Inherit Security settings" check box
Remove the Group that contains your developers (Unsually the [Team Project]\Contributors group)
The downsides to these approaches
1. The Devs will have to do this on each machine \ workspace they are using.
2. The devs may accidently try to check in the file, this will cause an error.
If you do both then you'll mitigate the problem with the devs checking the file in accidently as it will be cloaked, but you'll still have the issue of each developer needing to set up the cloaked file in every workspace.
Alternatively you could have a "special" version of the file checked in to a different location in source control ,which is copied in to the correct location (overwriting whatever the devs have checked in), as part of your build process.
you can give rights
from source code security tab.
u have to add the person or group in Global Groups And after that you can give any rights from security tab!
I'm creating a tool that needs to browse for folders into TFS. In other words, I want the user to be able to select a folder within projects in TFS.
Also I found a method posted by Jeff Bramwell. It does most of the work but I would like to be able to allow the user to select folders within TFS.
Does anybody know how to do it?
Thanks
There's an internal api to popup a dialog, it's not supported but you can use it.
http://msmvps.com/blogs/molausson/archive/2010/10/21/browse-items-in-tfs-version-control-programmatically-reposted.aspx