Is it a bug that a Tempo Team Admin can view ALL users timesheets in the Project Report?

[Guy Anela]

I have a Tempo Team configured as such...

• Tempo Admin = AdminUser
• Tempo Team = User1, User2, User3

Lets say I have 10 total users (Users1-10) and they logged work on two separate Projects (ProjectA and ProjectB)...

• User1-5 logged work on ProjectA.
• User6-10 logged work on ProjectB.

Scenarios:

1. When the AdminUser views the Tempo Team Report, they can only see timesheets for User1-3 (which seems correct).
2. When the UserAdmin views the Project Report for ProjectA, they can see timesheets for User1-3 as well as User4-5. I was expecting it to continue to only show timesheets for User1-3.
3. When the UserAdmin views the Project Report for ProjectB, they can see timesheets for User6-10. I wasn't expecting it to show any timesheets.

Are scenarios 2 and 3 above working as designed or is this a known bug? If the latter, is there a workaround that will allow me to restrict which users the AdminUser can view in the Project Report?

BTW, we're using JIRA 5.0.2 with Tempo 7.1.

Thanks in advance,

Guy

[Susanne Götz [Tempo] · Accepted solution]

This is not a bug. Originally the Browse Project permission was thought to controll the access to worklogs on the project, including the users that were logging time on issues in the Project. As I said before we are now changing this and will release improvements in Tempo Timesheets 7.8 compatible with JIRA 6.0 and higher. The release is sceduled later this month.

Regards

Susanne

[Susanne Götz [Tempo]]

Hi Guy,

if the AdminUser has the "Browse Project" permission for Project B, he will be able to see all worklogs on this project, also the ones of Users not on his Team. If you don t give him this permission, he will still see the Team Report as before and all the worklogs on Project A (also for User 4 and 5).

We are working on improvements of these permissions and will release them in Tempo Timesheets 7.8

Best regards,

Susanne (Tempo)

[Guy Anela]

Thanks for the response Susanne!

We can't remove the Browse permission as the user needs to be able to view the tickets in both projects. Besides, that still doesn't address the issue in scenario 2 (being able to view User4-5 timesheets in ProjectA).

That's a bummer. Is this bug documented somewhere so I can check back on its status?

Thanks again,

Guy