The user can see ALL projects, he should only see the projects assigned to him.

ashwinimastud · July 16, 2020, 7:45am

Below is the scenario that I have and tried,

I created two projects, Test Project 1 and Test Project 2.
I have 1 Project Manager, 2 Developers and 1 QA who would be working only on Test Project 1.
I have created their users in ERPNext as System Users and have given them the below roles,
a. Project Manager > Project Manager
b. Developer > Projects User
c. QA > Projects User
Then, I assigned the Project Manager, Developers and QAs to only Test Project 1 by using the “Assign to” option in the Project.

Assigned%20to1270×585 26.6 KB
But, when I login with any user (i.e. project manager or developer or QA), I can see all the projects (i.e. ones that are not assigned to them as well).
The expected behavior here is to see only projects that are assigned to that user (in this case only Test Project 1).
So, I am unable to restrict users to view assigned projects only.
Can someone please help/suggest what more needs to be done so that I can restrict my users to see only the projects that are assigned to them?

kartik · July 16, 2020, 5:01pm

@ashwinimastud You can use User Permission doctype for the same.
Select the user, Project in allow field and project name in for value field.

ashwinimastud · July 17, 2020, 10:02am

Hi @kartik ,
Thanks for your suggestion. We have already tried this option, but it won’t be feasible in a scenario where I have (for example) 10 - 15 projects and 100+ member team (mix of Project Managers, BAs, TLs, Developers, QAs, etc…).
Assigning projects to team members and then managing them this way will become a little tedious and cumbersome process in the long run where projects and team will constantly change and increase/decrease.
Is there any other easy and straight forward way to assign projects to the users and manage these assignments?
And, any idea why the Assigned To field does not do this? I mean it allows assigning users but does not restrict the users to view only the projects assigned to him?

kartik · July 17, 2020, 11:12am

Try this.
Remove permissions for Project doctype from the role assigned to these users. And then they should be able to see only the assigned projects.

ashwinimastud · July 21, 2020, 9:45am

I tried removing the permissions for Project doctype and it worked for projects. Now the user can see and access only the projects assigned to him. Thanks for the suggestion.

But came across another issue where, there are different Kanban Boards created for the different projects and if the user selects another project from the Kanban Board view (using the filter section), then the user can access/edit tasks from other projects which are not assigned to him.

For example, only Test Project 1 is assigned to user: anna.sthesia@gmail.com but she is able select Test Project 2 from Kanban board view as shown in the below screenshot,

Thanks!

ashwinimastud · July 21, 2020, 11:06am

Also I was thinking, can we create a new permission as “List” for project user (say for developers) where user can see list of all projects and tasks but able to access/edit only assigned projects or tasks?

Or any other alternative way to achieve this if adding a new permission is not possible.

Thanks!

kennethsequeira · July 21, 2020, 1:55pm

Try the sharing option instead and see if that works out:

https://docs.erpnext.com/docs/user/manual/en/setting-up/users-and-permissions/sharing

ashwinimastud · July 24, 2020, 12:34pm

Hi @kennethsequeira , I tried “Shared with” option to restrict user to access/edit tasks from other projects which are not assigned to him but it didn’t worked and the user can still access and edit tasks which are not assigned to him.
Any idea why the Shared with option does not restrict users from accessing documents which are not assigned to him?

Also the Assigned To field does not restrict users from accessing documents which are not assigned to him.
Just curious to know and understand why and how would someone use Assigned To and Share options?
Thank you!

njbhatt18 · May 5, 2021, 11:09am

we have configured user based project and task through share options and permissions. It is working for us.

szufisher · May 5, 2021, 11:24am

interested in knowing the details. thanks

goldenscrew · August 23, 2022, 12:59pm

Hello, did you find solution?

goldenscrew · August 23, 2022, 1:05pm

Hello. Can you write more about it??

goldenscrew · September 20, 2022, 10:35am

Actual!

Abdur_Ravouf · September 12, 2023, 1:18pm

Can you find the solutions for this? Please write more about it.
thanks in advance.

Jigar_Tarpara · September 12, 2023, 1:22pm

you can use hook get_permission query and write custom logic for that

Abdur_Ravouf · September 13, 2023, 6:34am

I am new to this ERP. Can you explain in detail please?

Nebiye_Lioul1 · October 4, 2023, 4:10pm

check “Apply Strict User Permissions” in “System Settings”

by default, users can see a document if the field you used in User Permission is null.

rsyed · August 13, 2024, 8:23am

Hi Kartik, when you say remove permissions for the doctype, what are all permission we should uncheck, could you please explain in detail. Because I just enabled Select,report permissions for the Project User role (in Project doctype) but still could see all projects irrespective of assignment