Read Only Permission on project site (PS 2013)

In Project Server 2010, if someone could see all projects, and had the “View Project Site” permission (basically the Executives group), you would end up with only Read rights on a project site.  You could view stuff, but not edit anything. 
In Project Server 2013 we are having an issue with giving read only access to project sites. After comparing our customized groups/categories with the ‘out of the box’ Portfolio Viewers security permissions we have actually given our groups less permissions.
We want these users to be able to see all projects, but only have read only permissions on the project sites.  That is not happening.  The executives end up with contribute permissions similar to what a team member with assignments on a project
would get.
any feedback will be appreciated.
Thanks,
Ali Al . Consultant & Development Manager.

Hi Paul,
This issue was fixed in the November 2014 cumulative update for Project Server 2013:
Hotfix KB2899547 for Project Server 2013 November 11, 2014 (Projectserverwfe-x-none.msp; Projectservermui-<Language-Code>.msp)
http://support.microsoft.com/en-us/kb/2899547
The fix is also included in the cumulative update for Project Server 2013:
November 11, 2014 Cumulative Update for Project Server 2013 package
http://support.microsoft.com/en-us/kb/2889949
More recent updates will include this fix.
Brian Smith published a blog with additional information:
Project Server 2013: Project now controls the Visitors group on Project Sites
http://blogs.technet.com/b/projectsupport/archive/2015/02/03/project-server-2013-project-now-controls-the-visitors-group-on-project-sites.aspx
Thank you,
Suzanne
Microsoft Corp.
Suzanne Sylliaasen [MSFT]

Similar Messages

  • Error when Read only permission set when filtering data before loading with Excel 2013 Addin

    Good afternoon :)
    I have an MDS issue that is making me lose my mind.
    I have some permission set to an Entity. It is a read only permission in the entity but I tried to put inside every field and same thing happen.
    Every time an Entity has any kind of read only permission assigned to it or its fields, Excel Addin show an error when we try to load it. When Entity has more rows than the maximum rows in the Settings pane, it will show you an option to filter data. When
    you try to use this filter, Excel show an error message but you can press OK and everything works fine.
    There is the message:
    The thing user, my user do not want it :( And I don't know how to get rid of it.
    Do anyone have an ideia on how to fix it ?
    In the debug set of the addin, there is this message:
    2014-10-22T11:38:42.152        8440 EXCEL.EXE            EXCEL.EXE                               
    Generic          EventType: Error, Message: Unobserved exception in TaskScheduler. Exception:'System.AggregateException: One or more errors occurred. ---> System.NullReferenceException: Object reference not set
    to an instance of an object.
       at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
       at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
       at System.Windows.Forms.WindowsFormsSynchronizationContext.Send(SendOrPostCallback d, Object state)
       at Microsoft.MasterDataServices.ExcelAddInCore.ExcelHelpers.ExecuteOnUIThread(SendOrPostCallback callback)
       at Microsoft.MasterDataServices.ExcelAddInCore.DataView.FinalizeUIOperation(Boolean mdsOperation)
       at Microsoft.MasterDataServices.ExcelAddInCore.DataView.<>c__DisplayClass53.<LoadData>b__51(IAsyncResult ar)
       at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar, Func`2 endFunction, Action`1 endAction, Task`1 promise, Boolean requiresSynchronization)
       --- End of inner exception stack trace ---
    ---> (Inner Exception #0) System.NullReferenceException: Object reference not set to an instance of an object.
       at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
       at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
       at System.Windows.Forms.WindowsFormsSynchronizationContext.Send(SendOrPostCallback d, Object state)
       at Microsoft.MasterDataServices.ExcelAddInCore.ExcelHelpers.ExecuteOnUIThread(SendOrPostCallback callback)
       at Microsoft.MasterDataServices.ExcelAddInCore.DataView.FinalizeUIOperation(Boolean mdsOperation)
       at Microsoft.MasterDataServices.ExcelAddInCore.DataView.<>c__DisplayClass53.<LoadData>b__51(IAsyncResult ar)
       at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar, Func`2 endFunction, Action`1 endAction, Task`1 promise, Boolean requiresSynchronization)<---

    Rafael,
    Is this still an issue?
    Thanks!
    Ed Price, Azure & Power BI Customer Program Manager (Blog,
    Small Basic,
    Wiki Ninjas,
    Wiki)
    Answer an interesting question?
    Create a wiki article about it!

  • Default "Reader" group for new Project Site to include AD group automatically

    I'd like to add "Domain Users" to the readers group for all new Project Sites, as well as the "PMO" AD group to the Owners group for each site automatically as the site is created.
    Is there a way in Project Server 2013 to do that via config?  I'm able to write it programmatically, but don't want to do that if there's an easier way.  We simply don't have time to push that code through right now.
    Thanks,
    Bill Richardson

    I think the only option is to do this programmatically via a custom Project Server event handler. You would probably want it to fire on the Project published events and may the WSS created event.
    Paul
    Paul Mather | Twitter |
    http://pwmather.wordpress.com | CPS

  • Provide Read-Only Permission using Category Permissions

    I am wondering if we can provide read-only access to PMs on specific Project Plans. using category/group based security permissions.

    Yes it is possible, but with so little details about your configuration and need, we can't help you much. I'd suggest that you take a look to the RBS feature.
    Using the RBS, you can configure security categories so users belonging to group associated with this category can only see in read only projects which are not belonging to the given category or projects owned by users at the same level of RBS.
    Hope this helps,
    Guillaume Rouyre, MBA, MCP, MCTS |

  • Grant read only permission on my stored procedure.

    I have a requirement like give reaonly access on my stored procedure to another user , not even execute permission on that steored procedure.
    Could you please let us know the command ?

    Marwim wrote:
    You can read the source of any PL/SQL code in dba_sourceBut that requires a priv such as select any dictionary to be granted. Why would you want to give a schema access to reading any and all source code in the database?
    This is why I think it is important that the OP provides the reasons behind the question of granting read-only source code access.
    Security is a critical component of software engineering. The basic security principle is to grant the absolute minimum privileges required to s/w and users to get the job done. Granting access to a schema read access to a dictionary view like DBA_SOURCE violates it.
    If userB wants to see userA's source code - then why not have userA simply mail it to userB, or check the code into a common source code repository?

  • Customer MasterPage & Read Only Permission

    Hi,
    I have added the code below to the masterpage, but only administrator can see the effect on the relevant page and not users with read permission. Why is that and how can I fix that?
    Any help would be appreciated.
     <script type="text/javascript" >
    ExecuteOrDelayUntilScriptLoaded(retrieveSpecificGroup, "sp.js"); 
    function retrieveSpecificGroup() {
       var clientContext = new SP.ClientContext.get_current(); 
       this.collGroup = clientContext.get_web().get_siteGroups();
        clientContext.load(collGroup, 'Include(Title,Id,Users.Include(Title,LoginName))');
        clientContext.executeQueryAsync(Function.createDelegate(this, this.onQuerySucceeded), Function.createDelegate(this, this.onQueryFailed));
    function onQuerySucceeded() {
        var groupEnumerator = collGroup.getEnumerator();
            var oGroup = groupEnumerator.get_current();
        while (groupEnumerator.moveNext()) {    
        if(  oGroup.get_id() == 25 )
                 alert("25");
        else if(  oGroup.get_id() == 26 )
                  alert("26");
        else
                 alert("None");
    function onQueryFailed(sender, args) {
        alert('Request failed. ' + args.get_message() + '\n' + args.get_stackTrace());
    </script>

    Make sure, you Check-In, Publish and Approve the master page. Only after its published and approved, changes will be visible to read only users
    Ram Prasad Meenavalli | MCITP | MCTS SharePoint | MCPD SharePoint | http://www.spdeveloper.co.in

  • Getting my External HD out of "Read-Only" permission...

    Ok, I just recently purchased my Mac used from my school, and because it has a marginally small Harddrive, I purchased an external drive to suppliment. But, after installing the device drivers, the HardDrive claims to be "Read Only" meaning that I can't store anything on it, defeating the purpose...Can anyone help me figure out how to change my permission settings on the Hard Drive so that I can use it? Thanks.
    eMac   Mac OS X (10.3.9)   External Hard Drive

    Select the disk in the Finder and choose Get Info from the File menu; next, check the disk's format.
    If the disk's format is Windows NT Filesystem, use the Disk Utility in the /Applications/Utilities/ folder to erase the disk.
    If the disk's format is MS-DOS, FAT32, or Mac OS Standard, look on the drive for a physical switch which might control the ability to write to the disk.
    If the disk's format is UNIX File System or any Mac OS Extended variant, change the permissions in the Ownership & Permissions section of the Get Info window so you can write to the drive.
    (16442)

  • Newly created folders give "staff" read-only permission

    When I create a new folder in my home directory it has the following permissions:
    Me: Read & Write
    staff: Read only
    everyone: No Access
    Other (non-admin) accounts seem to belong to staff and thus have read access to any non-standard folders in my main (admin) home directory.
    1) How can I change the staff permissions on these folders (Finder gives me an error)? Is this only possible using sudo chmod?
    2) How can I change the default permissions to stop giving default access to all users through the staff group?
    Thx,
    Chris

    Other (non-admin) accounts seem to belong to staff and thus have read access
    to any non-standard folders in my main (admin) home directory.
    The easiest solution is just not to keep confidential folders that you create yourself at the top level of Home. You could instead create a single enclosing folder to hold that all that extra material, call it, say, "My Other Stuff", and put it in your Documents folder where it would be protected from all other users. You could then create descriptive subfolders within in it, which would also be protected.
    If you still instead want to alter the permissions of folders that you create yourself and you don't want to use Terminal, take a look at [BatChmod|http://www.macchampion.com/arbysoft/BatchMod/Welcome.html].

  • User with Read-Only permission can write

    Hi,
    I have two Macs on a local network. I am sharing a folder on Mac-A and would like users to have read-only access to it. It is important that users cannot modify the data in this folder.
    On Mac-A:
    Selecting System Preferences->Sharing->File Sharing, I added the folder to "Shared Folders". Next, I added the user account "bob" and assigned Read-Only access. User bob is not an admin and shows up as a "Sharing Only" account under Accounts.
    On Mac-B:
    I connect to Mac-A as user bob and I can see the shared folder. I then am able to create and delete files in the "Read-Only" share. I've verified using File->Get Info that user bob does indeed have only read access.
    What am I doing wrong and what can I do to enforce read-only access?
    Thanks!

    Maybe your Mac-B user account has the same (short) user name
    as your Mac-A user account. Matching user names or short user names
    could make the Mac-B account able to Read & Write to your shared folder.
    Because I think you can log in with short user names to a server
    as well. I guess passwords should be matching as well,
    and perhaps the user ID's (System Preferences -> Accounts
    -> right-click on user) also?
    Cheers,
    Vincent Verheyen.

  • Read only permission and already formatted to fat32

    Please need some help
    Message was edited by: Shinjitom

    it say the usb need to be reformatted but i cant cause it says `'
    Volume Erase failed with the error:
    File system formatter failed."
    and it is brand new 4gb usb but dont know why it is saying last opened 1969

  • In office 2013 xls file showing the document may be read only or encrypted

    Hi,
    I am using office 2013 home and business edition.
    I got an error while opening the file with .xls extension
    from my computer and the same file if i access from different pc
    it is accessible.
    Please help me it's very urgent........ 

    Hi,
    Do you get the whole error message like this:
    Excel cannot access filename.xls. The document maybe read-only or encrypted.
    If yes, and the files were stored in local disk, this might be happened because you are accessing a file which has read only permission or permission not set at all. Please go to properties of that particular file and uncheck the read only
    check box. if the box is not ticked, then tick and un-tick it and apply. This will replace the file permission.
    If the files were stored in network share, please try to remove the two files from the network share (copy them to your desktop). Open each file and save it and then copy them back to the network share.
    Hope it's helpful.
    George Zhao
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Why MS Project Checks Out Project after Choosing Read-Only

    All,
    Below is an quote from one of our MS Project users:
    "When users try to do a Read Only of a project plan, MS Project is checking the file out to them.   When I go in to edit the plan, I can't because the file is checked out.  I inform the user who it is checked out to, but they
    are unable to check the file back in because they never checked it out to begin with."
    When the above happens, the admin will have to force the check-in.  Is the above by design or is it a bug?  We are using Project Server 2010.
    Thanks

    If it is CU Dec 2011, I guess you do not have SP2 installed, which you should do asap.
    That being said, I suspect this is due to a wrong manipulation since it would be an obvious and unacceptable bug. Can you detail step by step the process to reproduce this unexpected behavior?
    Hope this helps,
    Guillaume Rouyre, MBA, MVP, MCP |

  • Some top navigation disappears when site collection is made read-only

    I have a publishing site that displays the navigation across the top the site, and shows all subsites and pages below.  This all works (worked) OK.
    I had to make the site collection "read only" for a certain purpose, and I have found that now the top navigation for two of the sites now no longer displays. All the rest (5 other subsites) are OK.
    There is a "tab" that displays that takes me to the root page (/Pages/default.aspx) of the two subsites in question, but none of the pages below it display in the navigation.  If I take off the "read only" status of the site collection,
    they re-appear in the navigation.
    Any ideas about the cause of them disappearing from the navigation when read only? The pages are not checked out.

    Hi ,
    It seems that the default.aspx page in these two subsites "Pages" library is created directly or copied through SharePoint Desinger root folder, for solving this issue, you can
    check-out then check-in this default.aspx apge as major version, then when you set the site collection "read only", the default.aspx and other pages in "Pages" will still appear
    in root navigation dropdown for these two sbusites like other three sites, assume that you have set the navigation showing pages for these two subsites.
    Thanks,
    Daniel Yang
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Daniel Yang
    TechNet Community Support

  • Unable to find top level site associated with project site

    Hello!
    SP and PS 2013. I faced the problem with one project and its site synchronization.
    When user published this project at 1st time, the site wasn’t created (there were some errors), but user didn’t notice that. So, after few days when he couldn’t open
    the site, he ask me for help.
    I did my usual operations in such cases – I open “Connected sites” and create the site myself.
    Earlier there was not any problem with that. But now this project experiences some troubles with permissions sync for
    it’s site – there is no synchronization.
    I connected this problem with November CU, which has been installed couple of weeks ago.
    I have read about the same problems after upgrade, so I want to emphasize that site was created on the root site collection (Project Web App) and it is not a subsite
    of another project site.
    If there is no solution until next update, maybe there is some way to turn off permission synchronization only for this site?
    Any help will be appriciated!!!
    Kate
    Queue error:
    GeneralQueueJobFailed
    (26000) - PreparePSProjectPermissionSynchronization.PreparePSProjectPermissionSynchronizationMessage.
    Подробные
    сведения: id='26000' name='GeneralQueueJobFailed'
    uid='231b2c2c-fc8b-e411-942d-0050569d3fac' JobUID='79031b2c-fc8b-e411-942d-0050569d3fac' ComputerName='7d8a1473-f6a8-4a8e-b7fb-1bdd868c7e20' GroupType='PreparePSProjectPermissionSynchronization' MessageType='PreparePSProjectPermissionSynchronizationMessage'
    MessageId='1' Stage='' CorrelationUID='a923d99c-8e88-c0e8-c7e2-08a980da8c96'.
    Для получения дополнительных сведений проверьте журналы ULS на компьютере
    7d8a1473-f6a8-4a8e-b7fb-1bdd868c7e20 для записей с JobUID
    79031b2c-fc8b-e411-942d-0050569d3fac
    In logs:
    12/25/2014 12:42:45.85        Microsoft.Office.Project.Server (0x07E4)        0x5E10           
    Project Server                            Sharepoint Integration           
    amed3 Exception        Unable to find top level site associated with project site Site1 System.IO.FileNotFoundException: <nativehr>0x80070002</nativehr><nativestack></nativestack>Нет
    веб-сайта
    с
    именем "/Site1".     at Microsoft.SharePoint.Library.SPRequestInternalClass.OpenWebInternal(String
    bstrUrl, Guid& pguidID, DateTime& pdtTimeCreated, String& pbstrRequestAccessEmail, UInt32& pwebVersion, String& pbstrServerRelativeUrl, UInt32& pnLanguage, UInt32& pnLocale, String& pbstrDefaultTheme, String& pbstrDefaultThemeCSSUrl,
    String& pbstrThemedCssFolderUrl, String& pbstrAlternateCSSUrl, String& pbstrCustomizedCssFileList, String& pbstrCustomJSUrl, String& pbstrAlternateHeaderUrl, String& pbstrMasterUrl, String& pbstrCustomMasterUrl, String& pbstrSiteLogoUrl,
    String& pbstrSi...   2a29d99c-9ecc-c0e8-c7e2-037970debfdf

    Hi Kate_S,
    since you are already aware that its a known issue caused Sep 2014 CU i believe, and an official fix has yet to release.
    but i would like to clarify here that this issue doesn't have anything to do with project site creation, because sync queue job while creating project site fails but does not block other queues activities. so your project site should be created in a normal
    way.
    and until official fix will arrive, 1 of the option is to change your project sites to provision under root site collection instead of PWA site collection. But be aware that this will fix sync issue only for new project sites.
    Go to Central Administratio -> PWA settings -> open site provision settings menu and made changes.
    2nd option is, since Project Owner always get access to Project site, to teach your project owners to include project team members manually to project site permission group to allow them to have access. this option can help you with both new and existing
    project sites, and i personally prefer this and did the same for my affected customers.
    Hope these 2 options will help you. 
    Khurram Jamshed - MBA, PMP, MCTS, MCITP (
    Blog, Twitter, Linkedin )
    If you found this post helpful, please “Vote as Helpful”. If it answered your question, please “Mark as Answer”.

  • How to modify edit/read mode pop up for documents in "SP2013" to open in only read only mode

    Hi,
    When opening a document the users of my site and including me are getting a pop up asking to open it in read only or edit mode. We want to disable the edit option for end users. Those are confidential doc's. 
    We want them to open only in read only mode. How can it be achieved.
    Can we FORCE a read-only open of the document without giving anyone the option to open in edit mode? I don't have access to Central Admin. Hence kindly let me know if there is some javascript
    code that i can use to do this from browser.
    thank you !

    Hi Prajk,
    If users have edit permission on the documents in this library, even if we disable this dialog (by disabling the add-on "SharePoint OpenDocuements class" from IE browser), the users sitll could download the documents to local machine, and
    edit the documents in client Office application, then sync to library.
    If you want the users to read these confidential documents only, you can only grant the users read-only permission on the document items or on library level, then they could unable to edit these confidential docs, note to give proper users
    proper permissions.
    If you also want that the confidential docs could be opend and read-only in client Office application, you can configure the IRM (implemented by RMS) for SharePoint server, then set the document items in the library read-only for
    some users.
    https://technet.microsoft.com/en-us/library/hh545607%28v=office.14%29.aspx?f=255&MSPPError=-2147217396
    https://support.office.com/en-in/article/Apply-Information-Rights-Management-to-a-list-or-library-6714cfe3-ef39-43b0-bb65-a887726bb63c?CorrelationId=ebcf6a01-1d3c-4b75-86ae-c11322065be6&ui=en-US&rs=en-IN&ad=IN
    Thanks
    Daniel Yang
    TechNet Community Support
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
    [email protected]

Maybe you are looking for