Users, Schemes, Global Groups, Project Groups, Oh My...
We've been using Gemini for 3+ years - love it. Our current installation has 199 users, 80 projects, and 18K+ issues. We definitely know how to use the system.
We just bought the license for the latest version and plan to install it as a new installation. We're not going to upgrade from our current install.
I cannot make any sense out of the security configuration in the new Gemini. I have been spinning my wheels trying to make sense of the Management Guide PDF and the various webcasts for hours. I am more confused than ever.
I'm sure it's super flexible and wonderful, but man oh man - is it confusing.
We have 50 developers and a couple dozen clients. We typically have a project per client but sometimes we'll have several projects for one client (if there are big enough development projects at the same client). In the old Gemini it was easy: everybody get a login, I can assign a client to individual projects, and I can set a developer as a Resource in that project.
How on earth do I do this in the new Gemini? Assume these are the use cases:
Developer 1 can see Project A, B, and C. He is a resource for all of those projects.
Developer 2 can see Project B, C, and D. He is a resource for all of those projects.
Developer 3 can see projects A, B, C, and D but is not listed as a Resource.
Client 1 can only see Project A and can create issues, see the roadmap, etc.
Client 2 can see Projects B and C with the same set of permissions as Client 2. Most clients will fall into this category of user.
Client 3 only gets minimal permissions for Project D - help desk mode, I guess.
Clients cannot see any projects other than their own.
Clients cannot see all developers. Just the ones assigned to their projects.
Developers cannot see all projects. Only the ones they have been assigned to.
There is almost no concept of "Global" anything at our company, other than the Gemini Admin. Everything is per-project/client. I don't want to create a new account and have that client accidentally have access to every project. That would be bad.
On a side note, I'm thinking of having a Help Desk and a Development project per client. So each client will log in and see their Help Desk and their Development project. I'm assuming I'll have to duplicate each configuration or something.
Please help.
gsilvano
· 1 |
|
Monday, January 18, 2010, 9:25:19 PM |