One of the essential aspects of Tuleap is the fine-grained management of document permissions, allowing you to control who can read, modify, or share content. In this article, we will explain in more detail how this works.
Understanding and managing document permissions in Tuleap
Tuleap is a collaborative platform that enables project management, document management, and team coordination. One of the key elements for working effectively with Tuleap is managing document permissions, in order to control who can view, modify, or administer files.
Types of permissions
In Tuleap, each document or folder can have different levels of access:
Reader: allows users to view a document or its content. Being a reader means having access to the document, seeing it in the folder tree, and consulting its properties and history.
Editor: allows users to modify or move a document. Editors are readers who can also modify the document. “Modify” means uploading a new version, changing the link or the wiki page name, editing properties, moving the item, or deleting it.
Manager: managers are editors who can also define permissions on a document or folder and access logs.
Warning
If a user does not have permission to read a folder, they will not be able to access any of the documents it contains, even if specific permissions are defined on some files.
Document locking
Any project member can lock a document. To do so, simply go to the document manager and click on the closed padlock icon to lock it. A small closed padlock will then appear at the end of the document name bar.
To unlock the document, perform the same action in the document manager, where the closed padlock will have turned into an open padlock.
Information
The person who locked the document is the one and only user who can make changes to a locked document. In addition, only that person and project administrators can unlock a document.
Permission inheritance
Documents follow an inheritance system in Tuleap:
By default, a document inherits the permissions of the folder in which it is located.
It is possible to define specific permissions on a document or a subfolder, which then override the inherited permissions.
This flexibility makes it possible, for example, to protect certain sensitive files within a folder that is otherwise accessible to all project members.
Managing permissions by groups
Tuleap allows permissions to be assigned to individual users or to groups:
Project groups simplify permission management for all project members.
Custom groups are useful for granting access to specific documents to selected users (for example, financial and/or confidential documents).
Information
Managing permissions by group rather than individually reduces errors and makes future changes easier.
Practical tips
To keep permission management clear and effective, here are a few tips:
Organize the folder structure according to confidentiality levels.
Use groups instead of setting permissions document by document.
Regularly review permissions, especially after adding new users and/or files.
Remember that the absence of read permission on a folder automatically blocks access to everything it contains.