23

5

I understand that a site admin is required to create new projects because projects are contained within the "site" and a project admin has control of an individual project (I own my apartment, but that doesn't mean I can build new apartments in my building. OK, stupid example) but we work with a lot of small projects which come and go and I don't want my site admins to be a bottleneck for project managers to do their job.

Can you let project administrators create new projects?

Fog Creek Case FC1983871

flag
+1 - I agree. I've got people that would like to create projects but that I don't necessarily require as site admins. – Mat Nadrofsky Dec 6 2010 at 13:57
+ 1 I would appreciate this feature! We don't want everyone to have Site Admin abilities, but requiring Site Admins to create projects can be a bottleneck. – danaca Dec 28 at 21:18
+1 self service is important to me. Everyone can create new projects and the one who creates it gets to be project admin and can setup further access. – Bjørn Isaksen Feb 22 at 7:55

2 Answers

3

Our organization has several hundred FogBugz users in various parts of the world, so allowing our Project Admins to create new projects on a whim would be a very bad thing for us. We exercise strict control over site administration and creation of new projects to keep things manageable.

However, I understand your desire to allow non-Site Admins to create projects, and I share that desire; the difference being that my proposition does not involve elevating privileges of Project Admins.

My opinion is rooted in the belief that FogBugz' permission structure is too coarse, with the all-powerful superuser status, "Site Admin," being required for too many routine tasks. This solution, while by no means infallible, is based on considerable real-world experience with FogBugz on an installation with dozens of projects and hundreds of geographically scattered users:

I propose that Fog Creek bring back a modified variant of the old "Group Admin," but as a full-fledged user type that would sit between Project Admins and Site Admins, and allow them to CRUD projects and groups, but not interact with anything else in the Admin menu. To complete the scheme, also include a "User Admin" user type, which would inherit all Group Admin privileges, plus access to the Users interface and the ability to CRUD users; the User Admin would therefore sit between the Group Admin and the Site Admin. In descending order of privilege, the full list of user types in this proposition are as follows:

Site Admin > User Admin > Group Admin > Project Admin > Normal User > Community User > Virtual User

To illustrate, here is a partial mockup of the proposed New User screen:

Proposed New User Screen for FogBugz

A User Admin would only be able to set users' user Type to Normal, Group Admin, Community, and Virtual, but NOT User Admin or Site Admin (which would be the sole privilege of Site Admins).

These changes would ease all of our present challenges with the permissions system in FogBugz. Specifically:

  • It neatly handles the issues of project-, group-, and user-level administration, without requiring that so many users observe protocol and fully appreciate the impact of global configuration – configuration that really shouldn't be touched except by a select, trained few.

  • In breaking down the Site Admin role, delegation of many more tasks becomes possible. Currently these tasks must fall on the plate of one of the few full-blown Site Admins in our organization.

link|flag
I like where you're going with this, but you're not quite there. I agree with the base premise: FogBugz' permission structure is too coarse, but I dont htink the solution needs to be additional types of users. Instead, why not just have more granular permissions management? If you can set what a user (or group) can do in a project (read/modify/all), why not have the same thing for the whole site (but more granular)? I.e. a site-wide setting, "Modify Permissions" and then for users/groups you can have privileges of [Manage Projects|Manage Users|Something else]. – Avi D Jan 13 2011 at 9:21
@Avi D, RE: "but I dont htink the solution needs to be additional types of users." But what is a user type, except a "prefab" site-level permissions package? Supplying prefab packages ensures that (a) all customers are using the same language and (b) Fog Creek can constrain them to simplify application; e.g., that each user type is absolutely more privileged than the one preceding it. There's no reason why Fog Creek couldn't supply Site Admins with an interface for rolling their own permissions packages (a.k.a. "user types") to supplement prefabs. I don't believe these are incompatible ideas. – Grip Jan 13 2011 at 19:42
2

We have a case open to consider this feature for a future release. Please up-vote this question (not this answer) to show your support for adding this feature.

link|flag

Your Answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.