AzureDevOps-WSJF-Extension icon indicating copy to clipboard operation
AzureDevOps-WSJF-Extension copied to clipboard

No security controls on WSJF Extension settings.

Open JonFuenningPersonal opened this issue 1 year ago • 2 comments

We were expecting that the WSJF Extension settings https://dev.azure.com//_settings/MS-Agile-SAFe.WSJF-extension.wsjf-settings-hub would only be modifiable by Project Collection Administrators. We are finding that any user can make changes to the field mappings and Rounding settings. This is not acceptable to us. The ability to make changes must be locked down to members of Project Collection Administrators group.

JonFuenningPersonal avatar Aug 13 '24 16:08 JonFuenningPersonal

Thank you for raising this concern. We understand the importance of restricting access to WSJF Extension settings. We appreciate your feedback and will update you once we have made the necessary adjustments. Thank you for your patience.

AminTi avatar Sep 05 '24 07:09 AminTi

Hi @AminTi any progress on this matter?

nolddor avatar Jun 26 '25 11:06 nolddor