在我们的组织中,我们有一些项目(根据政策)对所有有权访问 TFS 的开发人员、QA 和项目经理开放.在一个拥有 150 多个团队项目和 500 多个有效用户的团队项目集合中,我们如何轻松地将所有有效的 TFS 用户添加到一个特定项目的读者"组中?
In our organization we have some projects which are (by policy) open to all developers, QA, and project managers who have access to TFS. In a team project collection with more than 150 team projects and 500+ valid users, how can we easily add all valid TFS users to the "Readers" group for one specific project?
注意事项:
- [Global]\Project Collection Valid Users 不能添加到任何组,因为每个组都自动成为有效用户组的成员.这将创建一个循环成员资格,无论如何,TFS 不会让您这样做(据我通过实验了解到).
- 我们可以创建一个新的 AD 或 TFS 组来包含有效用户"的自定义列表,但该列表在这种规模的组织中不断变化,如果要使该列表保持同步,则会带来管理挑战.我宁愿找到一种方法来利用 TFS 已经知道"所有有效用户是谁这一事实.
- [Global]\Project Collection Valid Users cannot be added to any group, because every group is automatically a member of the Valid Users group. That would create a circular membership, and TFS won't let you do it (as far as I have learned through experimentation) anyway.
- We could create a new AD or TFS group to contain a custom list of "valid users," but that list is constantly changing in an organization this size, and it would present a management challenge trying to keep that list in sync. I would rather find a way to take advantage of the fact that TFS already "knows" who all the valid users are.
我已经看过 StackOverflow 的问题 如何向一组用户授予对所有 TFS 团队项目的只读访问权限? 和 如何将 Windows 组作为读者"添加到 TFS 2010 集合中的所有项目? 在我开始输入这个问题时有人提出了这些建议,但我并没有尝试将一个用户添加到所有项目;我正在尝试将所有用户添加到一个项目.
I have already looked at the StackOverflow questions How to Grant Read-Only Access to All TFS Team Projects to a Group of Users? and How to add Windows group as "Readers" to all projects in TFS 2010 collection? which were suggested as I began typing this question, but I am not trying to add one user to all projects; I am trying to add all users to one project.
推荐答案虽然您无法将 Project Collection Valid Users 添加到项目组,但您可以添加组本身并为其授予与另一个组(例如,项目的 Readers 组).
Although you cannot add Project Collection Valid Users to a project group, you can add the group itself and give it the same permissions as another group (for example, the project's Readers group).
在此示例中,我们将向集合中的所有有效用户授予只读访问权限.您可能还想授予对项目源代码的匹配访问权限,因此我将其包含在示例中.
In this example, we will grant read-only access to all valid users in the collection. You will probably want to grant matching access to the project's source code as well, so I will include that in the example.
- 也可以选择查看测试运行权限,因为这是Readers组默认拥有的权限.
- Open Team Explorer
- Right-click on the team project name
- Select Security...
- In the Project Security dialog that opens, make sure that Team Foundation Server Group is selected, and click Add...
- In the Add Group dialog that opens, your project's groups and all global groups are listed. Select [YourCollectionName]\Project Collection Valid Users and click OK.
- Back in the Project Security dialog, the lower pane lists available permissions. Check the view project-level information permission.
- Optionally, select the View test runs permission as well, since that's what the Readers group has by default.
现在,所有已添加到您的 TFS 项目集合中的任何团队项目的用户都将能够访问您的项目并查看源代码.
Now all users who have been added to any team project in your TFS Project Collection will be able to access your project and view source code.
更多推荐
如何向所有用户授予 Team Project 访问权限?
发布评论