Home → Questions →

Can I create a project and only allow 2 contractor's to have access?

• Edit

Pure Krome

13 Nov, 2015 12:49 AM

Heya :)

so we have a Team setup. In the team we have our full time developers added. We can see our .. er ... nearly 20 projects or so.

Now, we have a NEW github project we've started BUT this is outsourced to 2x developers (contractors). I'm the third person in this team, but I do code reviews.

I wish to setup CI/CD with this new GitHub project.

I'm not sure what I should do here. I don't want to let them see/access our current AV projects we have setup. So they need to see their new AV projects (which I will have to setup). Our full time devs will also need to see it (in case i'm awol and someone, in house, needs to do stuff).

What's the best thing to do here?

1. Support Staff 1 Posted by Feodor Fitsner on 13 Nov, 2015 05:26 AM

   

   You should create a new role, assign both contractors to that role, then go through each project's "Permissions" and "deny" it for that role, except the project they can access.

   There is an issue to have "Deny all projects" permission: https://github.com/appveyor/ci/issues/199

   • Edit

2. 2 Posted by Pure Krome on 16 Nov, 2015 01:22 AM

   

   Can i just DENY View or do I need to DENY all 4 types

   • Edit

3. Support Staff 3 Posted by Feodor Fitsner on 16 Nov, 2015 01:24 AM

   

   Deny everything.

   • Edit

4. 4 Posted by Pure Krome on 16 Nov, 2015 02:04 AM

   

   OK. (urgh - so many projects....)

   it's like all roles need to have DENY on by default. then we tick on the access, manually.

   and update the ROLES to look like this....

   

   (and of course, that new option i added to that screenie, is turned OFF (unticked/unchecked) by default for all new roles, etc.

   if this sounds like a good idea, want me to add it to the existing GH issue?

   • Edit

5. 5 Posted by Pure Krome on 16 Nov, 2015 09:48 PM

   

   @Feodor -> this still isn't working :/

   So in our team, I added a Role -> Foo.
   I then added a github team -> myGHOrg/someTeam

   i then denied that role to all and allowed that role for the project i wish them to see.

   is that the process?

   when they log in, the do not see our TEAM in their login drop down box, thingy.

   • Edit

6. Support Staff 6 Posted by Feodor Fitsner on 16 Nov, 2015 10:17 PM

   

   Look at these notes: http://www.appveyor.com/docs/team-setup#github-integration-notes

   Also, make sure their emails are not added as "regular" collaborators.

   Send me their github usernames - I'll check some logs.

   • Edit

7. 7 Posted by Pure Krome on 16 Nov, 2015 11:56 PM

   

   All good :) we had to re-add them to the GH team and stuff .. and now it's sync'ing up. That doc did help, btw.

   cheers!

   • Edit

8. Pure Krome closed this discussion on 16 Nov, 2015 11:56 PM.