If you are citizen of an European Union member nation, you may not use this service unless you are at least 16 years old.
You already know Dokkio is an AI-powered assistant to organize & manage your digital files & messages. Very soon, Dokkio will support Outlook as well as One Drive. Check it out today!

Security

Page history last edited by PR Wiki 15 years, 8 months ago

ProjectReactor Security

The project manager is a superuser and has full access to all facets of a project. The other two levels are “client” and “team member”. The difference between a client and team member is that a team member gets to see privileged information (such as time spent on a fixed price deliverable and other budgetary information). The client also gets a subset of editing abilities, particularly with deliverables as we don’t want clients deleting or changing a deliverable once work has been performed against it.

The are 4 security levels, Create, Read, Update, Delete, with Update and Delete implying read also as the user will need to read the item they are updating.

Following are the special case rules.

Phases

Only a project manager can delete a phase and its entire contents. Anyone else may only delete empty phases (eg no deliverables or milestones tagged to that phase).

The phase name is considered to be available to all users of the project, as other items (eg milestones) need to be tagged to a phase.

Time Entries

Clients and team members may only update or delete their own time entries that are not tagged with an invoice number.

Deliverables

Clients may only edit deliverables depending on the status. If the deliverable is fixed price, a status of ‘A’ or ‘C’ precludes editing.

Clients may only delete deliverables that have no other items tagged to them (eg time entries, notes or documents.

The deliverable name, status and reference number is considered to be available to all users. This information is required to locate deliverables for timesheets and for tagging documents