Background Information
The default permissions in the My Projects category allow members of the Project Managers group to open the following projects Read-Write:
· Projects in which they are the manager
· Projects in which they are a team member but are not the manager
· Projects managed by other project managers, but in which their resources are team members
The Project Managers group and the My Projects category interact to control security permissions for each project manager in the system. To change the default permissions to meet the security needs specified in the question, the Project Server administrator must modify both the My Projects category and the Project Managers group.
Resolution for Project Server 2003
The Project Server administrator must first modify the My Projects category by completing the following steps:
1. Log into Project Web Access with administrator permissions.
2. Click Admin > Manage security.
3. Select the My Projects category and click the Modify Category button.
4. In the Projects section, select only the "Allow users in this category to view all projects they manage" option and deselect all other options in this section.
5. Click the Save Changes button.
Completing the above steps gives each project manager Read/Write access to only those projects in which they are the manager. The Project Server administrator must then modify the Project Managers group by completing the following steps:
1. Click Admin > Modify users and groups.
2. Click the Groups link in the sidepane.
3. Select the Project Managers group and then click the Modify Group button.
4. In the Categories section, select the My Tasks category in the Available categories list on the left side of the page and then click the Add button.
5. Select the My Tasks category in the Selected categories list on the right side of the page.
6. In the Permissions grid immediately below the Selected categories list, set the "Open Project" option to "Allow".
7. Click the Save Changes button.
Completing the second set of steps allows the project managers to have Read-Only access in Project Professional 2003 to projects in which they are team members but are not the manager of the project.
Resolution for Project Server 2007 and 2010
The Project Server administrator must first modify the My Projects category by completing the following steps:
1. Log into Project Web Access with administrator permissions
2. Click Server Settings > Manage Categories.
3. Click the My Projects category to open it for editing.
4. In the Projects section, select only the "The User is the Project Owner or the User is the Status Manager on assignments within that Project" option and deselect all other options in this section.
5. Click the Save button.
Completing the above steps gives each project manager Read/Write access to only those projects in which they are the Owner or Status Manager of the project. The Project Server administrator must then modify the Project Managers group by completing the following steps:
1. Click Server Settings > Manage Groups.
2. Click the Project Managers group to open it for editing.
3. In the Categories section, select the My Tasks category in the Available Categories list on the left side of the page and then click the Add button.
4. Select the My Tasks category in the Selected Categories list on the right side of the page, if necessary.
5. In the Permissions grid immediately below the Selected categories list, select the "Allow" checkbox for the "Open Project" permission.
7. Click the Save button.
Completing the second set of steps allows the project managers to have Read-Only access in Project Professional 2007 or 2010 to projects in which they are team members but are not the manager of the project.