Conflict between roles

[Tatiana Marti]

Hello,

We implemented users through groups (we use crowd). Each user is in at least one group and the group is authorized for the project.

We have some users who are in multiple groups because they work with multiple teams.

On a project if a group is a member and another group is a customer (reduced permissions) no problem, unless a user belongs to both groups. In this case, it seems that the role with the least permission is systematically preponderant.

How can we do to solve this problem?

[Nic Brough -Adaptavist- · Accepted solution]

Permissions do not work that way, they're flat and additive.

Let's say you set up a permission scheme such that:

• Browse:  group developer, and group customer
• Create issue: group customer
• Edit issue: group developer

If someone is in the customer group, they'll be able to create issues in the project, but not edit them.  If they are in the developer group, they will be able to edit issues, but not create them.  If the customer belongs to both groups, then they will be able to create and edit.

[Tatiana Marti]

Thanks for the answer