Skip to Main Content
IBM Sustainability Software - Ideas Portal


This portal is to open public enhancement requests against the products and services belonging to IBM Sustainability Software. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Future consideration
Categories Administration
Created by Guest
Created on Feb 10, 2023

Artifact-specific Permission definitions can not be shared with another Project via Process Template if Projects are Config enabled

These are the steps to reproduce the problem on a single server with default Jazz/DNG templates:

• Create a new Project Area ptest1 from Template "Requirements Management application template"
• Enable Configuration Management for ptest1
• Initialize the ptest1 Component from "Traditional Requirements Template"
• Modify the Permissions in ptest1 Project Area for role Author:
• Revoke Permission for: Requirements Management Ressourfces/Save Artifact/Create an artifact/Create an artifact of a specific type/Create Release Collection artifact [ptest1 Initial Stream]
• Revoke Permission for: Requirements Management Ressourfces/Save Artifact/Modify an artifact/Modify an artifact of a specific type/Modify Release Collection artifact [ptest1 Initial Stream]
• Revoke Permission for: Requirements Management Ressourfces/Save Artifact/Delete an artifact/Delete an artifact of a specific type/Delete Release Collection artifact [ptest1 Initial Stream]
• Save Permission definition of ptest1

Imagine that ptest1 is our central place to define the data model and role permissions. For projects to use this central data model we create separate project areas usually on another server. But even on the same server we face issues when we intend to copy data model and role permissions to another project area ptest2:

• Export a new Process Template from ptest1
• Import Process Template created in previous step into server
• Create a new Project Area ptest2 from Template imported in previous step
• Enable Configuration Management for ptest2
• Initialize the ptest2 Component from "Traditional Requirements Template"
• Check Permissions of ptest2: Author is neither allowed to create, to modify, nor to delete any typed artifact (in ptest2 Initial Stream)

The data model of ptest1/ptest2 Initial Stream is identical. So is the role-permission defintion.

How can we share permission setting for a common data model without the need to manually adjust project area configuration for every Component/Stream?
 
In DNG with Configuration Management enabled permissions for Modify Artifact are not shared properly between a sharing project area A and a project area B that uses the process configuration from another project area A for this project area B
The permissions in the derived project area B are not identical to the permisions in A for "Save Artifact". The permissions in B are more restrictive.
This is a severe bug and represents a blocking point.
Also permission "Save Links" has this problem.
Request: Propagate all permissions from source to target project.

Steps to reproduce:
1. Create a Process Template from Templates_DivC_RM and download it.
2. From the appropriate Stream in Templates_DivC_RM create a Component Template and download it
3. Upload the Process Template to a BU server
4. Create a new Project Area from the uploaded Process Template
5. Enable the new Project Area for Configuration Management
6. Uploaded the Component Template
7. Apply the uploaded Component Template
=> Check the permissions. They are different:
Permissions in source Project Area: attachment 260
Permissions in new Project Area: attachment 261

Idea priority Medium
Needed By Month
  • Guest
    Reply
    |
    Apr 26, 2023

    In my opinion, this is a very important issue, but it is not exclusively related to config management enabled.

    Thes core problem that the permissions on artifact type level are not there in the new project (as expected to be the same as in the source project) is due to that fact that creating new project areas works with separate process template (first) and project template (second).

    The process template has the roles and workflows, but has no data model. The data model comes with the project template, but the project templates does not know anything about roles and therefore the application of the project template cannot configure the permissions of the different roles! Config management on or off does not matter here!