Privileges Management and Access Control 

Whether a program can be accessed is determined by the program's privilege and access control.

This document will mainly introduce the privileges management and access control system of the program. It will be divided into: top-level programs (parent programs), sub-programs, products under programs, and access control for projects under programs.

1、Privileges Management of program

All privilege management of ZenTao is maintained under the "Admin" - "Member" - "Privilege".

Privileges of programs can be operated through privilege management and sight management.

1). Privilege Management

Click the "Manage Privileges by Group" button on the right side of the "Admin" - "Member" - "Privilege" to enter the privileges management page. 

The privilege management page of the program sight: checked to assign permissions, unchecked it to not assign permissions. 

2). Sight Management

Sight management privilege is a supplement to privilege management, which can quickly narrow the scope of privilege.

In other words, the sight management privilege provides a switch.

Open (checked): You need to assign the relevant privileges of the program in the privilege management before you can actually access the program.

Off (unchecked): Programs cannot be accessed even if the related privileges of the program are assigned in privilege management.

Scenarios for the use of Sight Management Privileges:

• For customized projects, Party A is also in the ZenTao system and needs to view the program, products, and projects.
• Party A's members are placed in a privilege group.
• Party A is assigned the relevant privileges for program, products, projects, and execution, but Party A cannot be allowed to see the program, products, and projects in ZenTao system.
• You can list Party A's accessible programs, accessible products, and accessible projects in Accessible Programs, Accessible Products, and Accessible Projects.
• In this way, Party A members of this privilege group can only view the listed accessible programs, accessible products, and accessible projects.

Click the "Manage Sight" button on the right side of the "Admin" - "Member" - "Privilege" to enter the sight management privilege page.

Sight Management Privilege Page：

• Access Sight: Checking the program means that the program can be accessed. Only the related privileges of the programs that have been assigned in the privilege management can actually access the programs.
• Access Program: Empty means that programs have no access restrictions. If programs are listed, members of that privilege group can only access the listed programs.
• Access Dynamics: The operations are listed in the program, and the program operation dynamics can be viewed in the program only if checked. 

2、Access Control of first-level programs (parent programs)

The access control of the first-level program (parent program) includes Private, Default, and Whitelist.

• Private: Program leaders and stakeholders can access, and stakeholders can follow up maintenance.
• Default: User who can visit the program can access it.
• Whitelist: When private, users in the whitelist can also access it.

When creating a first-level program (parent program), the default access control is private,and a whitelist of users can be set under private.

Access is private:

Access is default:

3、Access Control of Subprograms

Access controls for subprograms include Private, Default, Open within the program, and Whitelist.

• Private: Program leaders and stakeholders can access, and stakeholders can follow up maintenance.
• Default: User who can visit the program can access it.
• Open within the program: All superior program leaders and stakeholders, this program leaders and stakeholders can access.
• Whitelist: When access control is Private and Open within the program, you can set a whitelist. All whitelisted users can access the program.

Access is private:

Access is default:

Access is open within the program:

4、Product, Project, Member and Stakeholders of the program

1). Products, Projects, Members, and Stakeholders of first-level programs (parent programs)

Click to access a program set, then the product, project, member, and stakeholders under the program set will be listed.

• Product: List the products under the current program, which are accessible to the users.
• Project: List the projects under the current program, which are accessible to the user.
• Member: List contributors, accessible members, and whitelist. Accessible people are a collection of whitelists and stakeholders.
• Stakeholder: List the program stakeholders.

2). Products, Projects, Members, and Stakeholders of Subprograms

• Product: The products listed are the same as those listed in the parent program.
• Project: List the projects under the current subprogram, which are accessible to the user.
• Member: List contributors, accessible members, and whitelist. Accessible people are a collection of whitelists and stakeholders.
• Stakeholder: List the program stakeholders.

It is important to note that the access control of subprograms is exposed within the program.

Then the stakeholders and whitelists of the subprogram need to be displayed simultaneously with the stakeholders and whitelists of the parent program.

3). Manage the Whitelist and Stakeholders of the program

The whitelist of program can be added and removed in "Member" - "Whitelist".

Stakeholders of program can be added and removed in "Program" -"Stakeholder".

"Member" are divided into: Investment, Accessible, and Whitelist.

"Investment" list the team members in the project under the program.

The number of projects, executions, hours of work, tasks, bugs, and requirements of team members will be displayed.