Project Server 2013 Anonymous Access (SP or PS modes)

Greetings,
This has become quite painful.  I have two tickets opened with M$ and I've never witnessed that with which I am witnessing.
Simple question, how to enable Project Server 2013 Anonymous Access...I've been at it for over a week, I've tried in both SP perms mode and PS perms mode.  And I've built a bone stock SP/PS server to determine if my farm's jacked or not.  I get
the exact same behavior...prompt for creds.  M$ told me today that anon has never ever been something offered in SP or PS today or at any point in the past.  A simple gotomeeting sent that group reeling out off into outer space.  I'm glad I
could help them on their technical journey, but damn't if I don't feel used for spending $1000 on two tickets.
Tried everything I could possibly think of...Please help, before I eat a bullet.

When you enable anonymous access to a Web site, you allow anonymous users (and authenticated users who have not been granted access to the site) to browse the entire Web site, including any list, library, folder within a list or library, list item, or document
that inherits its permissions from the Web site
I think you are referring to PWA/_layouts/15/user.aspx if I understood your query correctly.
As you could read, its referring to SharePoint list and libraries and not Project Webpart data.
Anonymous Access: Specify what parts of your Web site (if any) anonymous users can access. If you select Entire Web site, anonymous users will be able to view all pages in your Web site and view all lists and items which inherit permissions
from the Web site. If you select Lists and libraries, anonymous users will be able to view and change items only for those lists and libraries that have enabled permissions for anonymous users. 
So this anonymous doesn't mean users can access, PWA pages like Projects.aspx with anonymous account. If this happens all anonymous users would see all projects...
Project PWA site, has pages like tasks.aspx, projects.aspx, Timesheets.aspx, etc. Users who access Project Server 2010 through the Web interface (Microsoft Project Web App) use these pages that are composed of Web Parts, which are modular elements that present
information on SharePoint pages. Now, to get users based data, this checks for user role, permission and data is rendered.
http://technet.microsoft.com/en-us/library/gg314584(v=office.14).aspx
I am curious to know if you would like all users who have not been granted access to the site also access your projects? What is the objective or business requirement you are trying to solve here.
Shazeb Khan

Similar Messages

  • Manage groups Access in Project Server 2013

    I am currently set up as Administrator and Project Manager in the Project Server 2013 Account, however  when trying to access the section Manage groups, I get the below error, can you please help me?
    Sorry,
    something went wrong
    You do not have sufficient
    permissions to view the specified page. Please contact your administrator for
    permissions to view this page.
    Many thanks,

    Hi,
    Clear browser cache and ensure the browser has compatibility mode on and the PWA site is trusted. Also you can verify issue with In private browsing mode.
    If Issue still persist re-sync your user profile by open and save thru Manage user and verify issue in different machine too.
    Hope it will be useful.
    Raushan Kumar |LinkedIn

  • I'm an admin of this site, but now can't access some pages in Project Server 2013 e.g. Project center, PWA setting

    I'm an admin of this site, but now can't access some pages in Project Server 2013 e.g. Project center, PWA setting

    it may be your browser.  CHeck the folloinwg
    1) Turn on Compatibilty mode
    2) Security Options / Make it a local trusted site
    3) Turn of Protected Mode in the browser under Security
    and have you tried it from Chrome
    CHeers!
    Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
    Website http://www.WhartonComputer.com
    Blog http://MyProjectExpert.com contains my field notes and SQL queries

  • Access Project Server 2013 from personal mobile device

    Dear All,
    This is something great about Project Server 2013 (PWA) where users can view theirs task & other information on their personal mobiles, tabs etc. But i not able to access my company Project Server 2013.
    Is that i am missing something to install or configure PWA 2013 as i am admin for this application?
    Kindly let me know 

    That means your PWA site collection in not published externally so your mobile device can't resolve the DNS. If you connect your mobile device to the same network your Project Server environment is on, it will work as the DNS would resolve. You probably
    want to look at publishing PWA externally if you want to use it on mobile devices. Here are some links for you / your IT department, the process is the same for PWA and any other SharePoint site collection:
    http://www.brightstarr.com/sharepoint-technology-and-application-insights/securely-publishing-sharepoint-externally-using-web-application-proxy
    http://blogs.msdn.com/b/sambetts/archive/2014/04/02/setting-up-a-reverse-proxy-for-sharepoint-with-tmg-server.aspx
    http://www.isaserver.org/articles-tutorials/installation-planning/Planning-SharePoint-Publishing-TMG.html
    Paul
    Paul Mather | Twitter |
    http://pwmather.wordpress.com | CPS

  • Can new PWA views be created whereby a filter can be set and associate to the view by default? (Project Server 2013 ONLINE)

    My main question is: Can new PWA views be created whereby a filter for that view can be set, and associate to the view by default? (Project Server 2013 ONLINE)? and can I have a filter set to filter on person logged on to...
    In previous versions of Project Server, when CREATING a PWA view, we were able to apply/ define a filter for that view.  Does not seem like it is the case in Project Server 2013 Online.  And if I remember, we could also use the URL Guid_view_id. 
    Please confirm; and / or tell me how-to.
    What I was hoping to do is the following... Given that our standard that we have adopted for reporting time is 'My Timesheets' (fyi, Single Mode Entry=ON), we have some resources who have others who do it on their behalf via 'My Tasks' (ie., accomplished
    by using the 'Assignment Owner' field, accordingly).  Therefore, when entering time on someone else's behalf within 'My Tasks', we like to present the user that is logged in only the tasks that they are are assigned to update on others' behlaf.
    I know that there is another more elegant approach to doing this which may be to use the Delegation feature. But since we are trying to stick to Sharepoint Security mode for now, this is not an option for the time being.
    Any help appreciated would be greatly appreciated.
    \Spiro Theopoulos PMP, MCITP. Montreal, QC (Canada)

    Hi Spiro,
    1- You still can define in Project Online a filter in the view settings, it is located just above the category setting. Here is a screenshot of the summary project center view:
    2- The view GUID is not anymore in the URL, since the URL triggers an action only on the webpart and not on the whole page. I agree this is annoying since it was great to send a URL with a specific view.
    3- Concerning the access to my timesheet versus my task, I'm not sure to get a full understanding but on a general way, it is much more easy to deal with those situation using categories which you cannot do with the SP permission mode.
    Hope this helps,
    Guillaume Rouyre, MBA, MVP, P-Seller |

  • Help needed Regarding Project Server - 2013 Workflow

    Hi All,
    I am new to Project server 2013 Workflow, hence please help me regarding this. Pardon me if this question is too trivial. 
    I have created a project type associated with a workflow and my workflow is as follows :
    So I am not doing anything here, I am just testing the workflow as mentioned by technet site : http://technet.microsoft.com/en-us/library/dn458865(v=office.15).aspx
    But it is mentioned that, after a minute or 2, the workflow state will change, also they have mentioned to press the Submit button.
    But in my case, the workflow is not moving to next stage [It just says 'The workflow is still processing - which never changes after hours] or I am getting the submit button (Submit button is disabled on the ribbon). Below is the state of my workflow :
    PS : I have made the user added to Portfolio managers group as well. But still I am having this same issue. 
    The Workflow manager is installed properly, and it is working fine in case of List workflow. I am facing the issue only wrt Site workflow for Project server 2013.
    Please help me to solve this issue.
    Thanks,
    shanky

    Hi Kiran,
    I am now facing issue while assigning a task to a person in the workflow.
    I am having a person named say 'John' , who is included in Project Manager as well as Portfolio Manager.
    And I am using a workflow as :
    Stage : Conceptual
    Assign a task to John (Task outcome to Variable: Outcome5 | Task ID to Variable: TaskID3 )
    Transition to stage
    Go to Approval
    But this is again giving issue as :
    Workflow Internal status : Cancelled
    Details: System.ApplicationException: HTTP 401 {"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have
    permission to perform this action or access this resource."}}}
    PS : I have used the same Sharepoint admin account for 'Account Name' in ‘User Profile Sync' , Is this causing the issue? Please let me know.
    Thanks,
    Shanky

  • How to import the Issues list from an Excel File in Project Server 2013

    Hi,
    I'm using Project Server 2013.
    A Project Manager has been playing with the Issues List, deleting some fields, creating new columns and modifying some columns name. The result of this is that I'm getting this error everytime the task
    Reporting (Project Sync) is executed:
    General
    Reporting Wss list sync failed:
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='4feafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='5deafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='69eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='75eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='81eafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    ReportingWssSyncListFailed (24018) - 1100. Details: id='24018' name='ReportingWssSyncListFailed' uid='8deafda7-f147-e411-940d-005056957f05' SPListType='a1efd9a9-bd03-4604-91f3-31a2cc5693ff' Error='1100'.
    Reporting message processor failed:
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='5beafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='67eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='73eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='7feafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='8beafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    ReportingWSSSyncMessageFailed (24016) - RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.. Details: id='24016' name='ReportingWSSSyncMessageFailed' uid='97eafda7-f147-e411-940d-005056957f05' QueueMessageBody='ProjectUID='a1efd9a9-bd03-4604-91f3-31a2cc5693ff'.
    ForceFullSync='False'. SynchronizationType='Issues'' Error='RDS failed while trying to sync one or more SP lists. The RDS queue message will be retried.'.
    Queue:
    GeneralQueueJobFailed (26000) - ReportingWSSSync.WSSSyncMessageEx. Details: id='26000' name='GeneralQueueJobFailed' uid='98eafda7-f147-e411-940d-005056957f05' JobUID='9e937da7-f147-e411-940e-005056957f0d' ComputerName='b579360a-53ab-4fe0-bf9b-c62f5e8d3529'
    GroupType='ReportingWSSSync' MessageType='WSSSyncMessageEx' MessageId='1' Stage='' CorrelationUID='0945bd9c-0d6a-a0f1-47b0-68cdfcfbff9a'. For more details, check the ULS logs on machine
    b579360a-53ab-4fe0-bf9b-c62f5e8d3529 for entries with JobUID
    9e937da7-f147-e411-940e-005056957f0d
    What I'm trying to do is to create a new Project from the scratch, update the Issues List, not deleting or modifying columns, just creating new columns in order to match the names he (the Project Manager) put in his Issues List, then Export the list to Excel,
    and then create a datasheet view matching the Exported list, but here I don't know how to import the list (copy / paste or whatsoever it can be done...)
    Do you know how to do it, or do you know another/any method to solve this problem?
    Thank you in advance,
    José Espases

    Hi José,
    2 considerations: 
    The first one is that (as you experienced) one should not delete or rename any of the predefined columns in the risk/issue list. What you did is the right way, meaning keeping the native column as is and creating new ones based on the business needs. Finally
    you just need to create view with the appropriate fields.
    Then for importing risks from an Excel list, I can't test it right now, but you should have a datagrid view (MS Access type) allowing you pasting data from Excel.
    Hope this helps,
    Guillaume Rouyre, MBA, MCP, MCTS |

  • How to get timesheet information in a javascript (Project Server 2013)

    Hi all,
    In Project Server 2013, I'm trying to customize the Timesheet ribbon. This far, I've been able to add a new button and tie an event to it. All is working well. This is all done using elements.xml and a javascripts.
    Now the problem is that I want to get some informations about the timesheet (the Guid for example) and, for now, I've got no success. I know that there is an object called PS.TimeSheet, but when I try to use some PS.TimeSheet's methods I get an error.
    Note that i'm in the page http://servername/pwa/timesheet.aspx (there is not Guid in the address) and all the treatments should be done in the javascript (no call to another aspx page)
    Thanks !

    Finally, I've found the solution.
    My goal was to add a button in the timesheet ribbon to launch a special report showing some data about the timesheet. The report has the timesheet Guid as parameter.
    To customize the Sharepoint ribbon, you have to do it via an xml file and a javascript (a lot of explanation is available in the internet that explains how to do it). So I had to call a function in the javascript to launch the report (which is a SSRS report).
    When you are in a javascript you have access to many global variables. When the timesheet.aspx is displayed, there is a global variable called "timesheetComponent".
    Using this variable we can call the method :
    timesheetComponent.m_consumedApi.get_Impl()
    to get an implementation of the current timesheet. This implementation has an attibute that has a lot of nice stuff about the current user and the current time sheet. This attribute is 
    _headerInfo
    _headerInfo is a structure that includes tsUid which contains the timesheet Guid I was looking for.
    Finally, the function attached to the button goes like this :
    function _LaunchReport() {
    var tsUId;
    var rptPath;
    var tsImpl = timesheetComponent.m_consumedApi.get_Impl();
    try
    if (CONST_REPORT_PATH == null || CONST_REPORT_PATH == "" ) {
    alert("Constant CONST_REPORT_PATH is not defined")
    else {
    tsUId = tsImpl._headerInfo.tsUid;
    rptPath = CONST_REPORT_PATH + 'TimesheetDetails&rs:Command=Render&rc:Parameters=false&TimesheetUID=' + tsUId;
    window.open(rptPath);
    catch (Err) {
    alert(Err)
    CONST_REPORT_PATH is the path to SSRS defined elsewhere
    I hope this will help some other poeple !

  • Project Server 2013 - External Data Refresh Failed

    Hi, 
    I have built  new Project Server 2013 in a 3 tier farm, with OWA, configured PWA site everything working fine except, Reports in BI Center, where i am getting - External Data Refresh Failed error
    http://Sp2013/PWA/ProjectBICenter/Sample%20Reports/Forms/AllItems.aspx
    i have stopped using Excel Web also to use Excel Services, get below error
    External Data Refresh Failed
    An error occurred while accessing application id ProjectServerApplication from Secure Store Service. The following connections failed to refresh:
    Project Server - Issue Data
    Project Server - Risk Data
    Learn
    more about data refresh
    Steps Tried:
    1.deleted Excel Services - recreated
    2.Deleted Secure store - recreated
    Built  test box without OWA still have the same issue
    Any suggestions/ Solutions greatly appreciated.
    Thanks 
    Aleem
    Alim

    Hi,
    If you are still facing the same issue follow the below steps:
    1) Access PWA from your server
    2) Download any built in report from Reports section (in your case
    Project Server - Issue Data Project
    Server - Risk Data) to your server.
    3) Open report in excel, go to Data->Connections in Workbook Connection dialog open "Project Server - Issue Data" go to properties.
    4) Here select tab 'Definition' under connection file remove tick for 'Always use connection file'
    5) Tweak your connection string & tick save password option 
    6) Excel Services: Authentication Settings (suit yourself)
    Now, save & publish on PWA, hope it works :)

  • After installing Project Server 2013 (without updating SharePoint Server 2013 SP1))

    I am facing the problem while opening project web app. I configured the SharePoint 2013 and project server 2013. Here is the detail what I performed the steps:
    OS Server 2012 R2, SQL Server 2012, SharePoint server 2013 version
    15.0.4420.1017, Project Server 2013 version
    15.0.4454.1000. SharePoint configured and running successfully. After project web app site provisioning successfully completed. I got the below error.
    Microsoft.Office.Project.PWA.WebParts.PWAPart' from assembly 'Microsoft.Office.Project.Server.PWA, Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c' cannot reduce access.
    I run this psconfig -cmd upgrade -inplace b2b -wait -force. But still getting same error.
    Previous steps:
    Earlier I had also tried to install SharePoint Server 2013 SP1 "3823428". After the installation SP1 some of sharePoint site features suddenly stopped e.g: Cannot  browse "Service Applications -->
    Manage service applications"  option even after re-start the server. This was previous error after upgrading SP1
    "Method 'get_IsClientValid' in type 'Microsoft.SharePoint.WorkflowServices.WorkflowServiceApplicationProxy' from assembly 'Microsoft.SharePoint.WorkflowServices,
    Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c' does not have an implementation"
    Anyone can help me!!! Thanks...
    Faisal Numan

    hello,
    For SP2013 and PS2013 to work properly on Windows Server 2012 R2 you need to use the SP1 install media for both, download SharePoint 2013 with SP1 and Project Server 2013 with SP1
    http://support.microsoft.com/kb/2891274
    http://blogs.technet.com/b/office_sustained_engineering/archive/2014/03/03/announcing-availability-of-slipstreamed-office-2013-and-sharepoint-server-2013-with-sp1.aspx
    http://blogs.technet.com/b/projectsupport/archive/2014/02/25/project-2013-and-project-server-2013-service-pack-1.aspx
    Paul
    Paul Mather | Twitter |
    http://pwmather.wordpress.com | CPS

  • Project Server 2013 Task Reassignment Privileges Off? (Works in Timesheet)

    Version: Project Server 2013
    I'm trying to give our users access to reassign tasks.  I turned on "Reassign Task" on the Global Permissions and gave them security to "Assign Resource" on all their categories.
    I've tested this, and the "Reassign" feature is available and working then they are on the "Timesheet" page, but it is grayed out and gives the message:
    "This control is currently disabled.  You might not have the right permission level to use this, you might need to select an object or item, or the control might not work in this context."
    Again, the same task is available to be reassigned in Timesheet though.
    My guess is that this is a Security Permission issue, because my account which I am the Administrator and Owner of the project, I can reassign tasks on both pages.
    Any suggestions?
    Thanks,
    Justin
    It's me

    Hi Justin,
    Just for your information, as far as I know, the "assign resources" is not necessary for using the "reassign task" feature. The "reassign task" global permission is enough.
    To be sure to understand your issue, the "reassign task" button is available for you as admin or project owner, but not for users which you granted the "reassign task" permission to? Am I right?
    You are talking about global permissions but did you add the "reassign task" to the
    groups permission the users belong to?
    Silly question, but do the users have select a task before trying to reassign it?
    Hope this helps,
    Guillaume Rouyre, MBA, MCP, MCTS |

  • Allow collaboration on un-published / checked-in project on Project Server 2013 and Project Online

    Hi All,
    Before a project is officially published specific resources in the project team need to be able to "collaborate" i.e. create tasks, change dates, etc. before the project is published. The complication is that we need this collaboration to happen
    on un-published / checked-in versions of the schedule. For example, the primary Project Manager adds tasks and makes changes to a published version of the schedule, saves and checks-in the project (doesn't publish), tells a secondary PM to go in and review
    the changes, the secondary PM should be able to see the changes the primary PM made, even though the schedule changes weren't published, be able to check-out the schedule, review what the primary PM did, make some more changes, save and check-in the schedule
    (again, without publishing it), and tell the primary PM to review. Then the primary PM could go, check-out the schedule, review it, save it, publish it, and check it in.
    Can Project Server 2013 or Project Online allow to do this? I looked into permissions and Server settings but I couldn't find anything that would indicate it is possible.
    Any help will be greatly appreciated!
    George

    Hi George,
    If you perform some tests, you'll see that even from PWA, the schedule can only be edited from the draft table. When you access the schedule in read only (as a team member for example), you see the published version, but as soon as you edit it (after clicking
    on the edit button assuming you have the appropriate permission), you'll open and update the draft version of the project.
    As far as I can remember (I don't have it in front of me now), you have a "line" in the schedule PDP (don't know how to call it in english) that will tell you if you are accessing either the draft or the publish version.
    Hope this helps,
    Guillaume Rouyre, MBA, MCP, MCTS |

  • Project Server 2013 SSRS with Project Site

    Hi All,
    We are using Project Server 2013. We have developed a SSRS report by accessing Project Site lists. It was working fine for some time, now when we try to access the report it is showing loading. The data source itself is not working, we used http://<servername>/PWA
    as URL for the data source . The reports developed without Project Site list are working fine. 
    After 5 to 10 minutes it is showing the below error.
    An error has occurred during report processing. (rsProcessingAborted)
    Query execution failed for dataset 'dtRisk'. (rsErrorExecutingCommand)
    An error occurred when accessing the specified SharePoint list. The connection string might not be valid. Verify that the connection string is correct. (rsSPDataProviderError)
    For more information about this error navigate to the report server on the local server machine, or enable remote errors
    When we try to test the datasource connecting string, after 5 minutes showing the below error.
    An error occurred when accessing the specified SharePoint list. The connection string might not be valid. Verify that the connection string is correct. (rsSPDataProviderError) Get Online Help For more information about this error navigate to the report server
    on the local server machine, or enable remote errors 
    Below connection setings
    Thanks in advance , Taj

    Hi Taj, 
    Your list is in PWA? is a global list?, if not, try to make a connection with http://server/PWA/SiteProject may this can resolve, because when you do some DS with a SPList, your need to stablish that connection directly at site path where you have the list.
    I hope this help
    Ray

  • Project Server 2013 reporting security

    HI
    I have a question and I have seen a couple similar ones but nothing definitive on the topic of permissions/security for Project server 2013 (in project server security mode) for either Excel(Odata) reports or for SSRS reports. 
    Even setting security aside the Out of the box configuration is certainly not elegant or even usable.
    Situation:
    In PWA project managers and team members can only see projects they, own, are team members on, or have been granted permissions explicitly to. (Pretty standard - is using security templates and "my Projects"). We are using secure store
    and impersonation for access to reports. We do have report authors groups.
    As an example a PM needs to create a weekly  status report but should not have to pull all the data back to then filter for their one project.
    However, when a PM goes to either SSRS or Excel using oData they can see every project in the company.  This is just does not make a lot of sense. Why would I hit the database for 100projects when I only care about one and yet there seems
    to be a lack of information on the topic. In contacting Microsoft we were told there was nothing we could do that is how it was designed.
    REALLY???? (see above)
    What we have come up for our approach is  that we're currently using the UserID value to set parameters in our data sources, but are looking for more 'elegant' approaches
    to security (if they exist) as there are some liabilities with this approach (EX is a report author forgets to put the parameter in the users will get everything back.
    QUESTION:
    If there is not another approach then we will stay with it. We can't imagine there isn't a better way.
    Additionally, the Project user view only contains the identity of the project owner not the rest of the team members (including sponsors who might need to see the data.) so where are they in the database?
    Tasks

    Hi Paul,
    I have a similar situation only I'm using Project Online. I have setup Groups and Categories where there is a relationship between clients and groups, and projects and categories. 
    Only issue is that when running a report a user receives an error and then all the data shows for all projects irrespective of the group/category/project relationship and the fact that user only exists in one group (and therefore can't see
    or access the other projects in PWA outside of their group.
    Hope that makes sense.
    Regards,
    Conrad

  • Project Server 2013 - After host header defined, WSSCreateSiteFailure

    after configuring webapplication and provisioning PWA (URL: http://<server_name>:<port>/pwa), i have extended the webapp to use host header and SSL protocol. now URL become something like this https://mycompany.com/pwa 
    if users access the site using this new URL, project site creation gives an error in queue as following. in ULS logs there is nothing useful as well. and if i open/publish the same project again, it gives me an error that project site is already in use.
    once point which may can makes a difference is that security certificate for above URL is yet to be configured, and due to this users are getting this certificate error in their browser while access site. could
    this be a cause?
    however if users use the site using the same old URL, project site get successfully created.
    any guesses?
    General
    CreateWssSiteContent: Creating project site failed! Project Uid=6b33f03d-b3af-e311-93fd-00155d01a359, site URL=https://epm/Projects/Project Site Teset, site name=Project Site Teset. :
    WSSCreateSiteFailure (16400). Details: id='16400' name='WSSCreateSiteFailure' uid='0809ce4e-b3af-e311-93fd-00155d01a359' projectUID='6b33f03d-b3af-e311-93fd-00155d01a359' workspaceUrl='https://epm/Projects/Project Site Teset' projectWorkspaceName='Project
    Site Teset'.
    Queue:
    GeneralQueueJobFailed (26000) - CreateWssSite.CreateWssSiteMessage. Details: id='26000' name='GeneralQueueJobFailed' uid='0909ce4e-b3af-e311-93fd-00155d01a359' JobUID='df8efb43-b3af-e311-93fd-00155d01a359' ComputerName='191cfefc-7d92-4801-a9d5-37d90cb6465e'
    GroupType='CreateWssSite' MessageType='CreateWssSiteMessage' MessageId='1' Stage='' CorrelationUID='1fe97e9c-2dfa-d087-6465-e3809f2d856d'. For more details, check the ULS logs on machine
    191cfefc-7d92-4801-a9d5-37d90cb6465e for entries with JobUID
    df8efb43-b3af-e311-93fd-00155d01a359. 
    Khurram Jamshed - MBA, PMP, MCTS, MCITP (
    Blog, Twitter, Linkedin )
    If you found this post helpful, please “Vote as Helpful”. If it answered your question, please “Mark as Answer”.

    Hey Paul, good to see you mate :)
    and yea i think now we are hitting more on the target.
    patch level is 0, its a RTM version without any update. and applying any kind of patch is also not easily possible, because its one server hosting a very complex and huge SharePoint portal as well. 
    with your clue, i have got Brian's blog related to this exact issue: http://blogs.technet.com/b/projectsupport/archive/2013/01/10/project-server-2013-project-sites-alternate-access-mapping-and-themes.aspx
    here he has mentioned a workaround until we apply patch, and also quoted it as a good way of configuring.
    From Brian's Blog:
    The first would be to use the fully qualified domain name (FQDN) as the Default zone Url, and then add an Internal
    Url to the same Default zone for the server name – http://Project2013/. 
    Another option would be to set the FQDN as the Default zone Url and then add the shorter version as the Intranet zone or Custom zone.  Either of these would mean that the strings wouldn’t get confused and the site would get created.
    now in my case, assuming machine name is: ServerA, and while creating webapplication which going to host PWA site i am defining required host header assuming: epm. 
    provisioning my PWA using this web app and defing PWA path as "Project" because its a migrated site so i have to use the same name, and the URL i am going to get in the end would be: http://epm/project
    AAM is, default zone: http://<server>:<port> and intranet zone: http://epm
    is the above complying with the first option of Brian?
    Khurram Jamshed - MBA, PMP, MCTS, MCITP (
    Blog, Twitter, Linkedin )
    If you found this post helpful, please “Vote as Helpful”. If it answered your question, please “Mark as Answer”.

Maybe you are looking for

  • RAID Set not showing up - 3 severe events

    Intelle Xserve running 10.6 RAID Card running firmware v E-1.3.2.0, Two it drives set up with I think RAID 5. The main person for the  system is away as well as his backup. So I'm running on very little information at the moment. Log: Called in due t

  • identifier expected � why show up when I was trying to compile !

    When i was trying to add another botton as a " buttonAdd " I will get the error message so I would be glad to help me , please ! import java.awt.*; import java.applet.*; import java.applet.Applet; import java.awt.event.*; import java.awt.image.*; pub

  • Upgrade Video Card To Something Else Other Then 8800GTS

    I have a 8800GTS in my mac pro right now and when I play games I get some lag from it like bad frame rates and so on. I was wondering can you upgrade the card with a different one I have a 3850 ATI card but it doesn't have a Mac Pro check on it like

  • JDev 11.1.1.2.0 - Error while providing Error Handler Class in Databindings

    I get this exception as soon as I provide a reference to ErrorHandlerClass in DataBindings.cpx Error 500--Internal Server Error oracle.jbo.JboException: JBO-29000: Unexpected exception caught: java.lang.InstantiationException, msg=empexceptions.model

  • Linking files between Macs and PCs in InDesign

    I'm Mac, my colleagues are PC. They have removed the letter mapping from their server links to enable me and them to share InDesign files seemlessly. This works perfectly until an Indesign file draws graphics from two (or more) seperate servers. In t