At one of my customers we are automating the project and project site creation for Project Server 2010. As part of that, we wanted the proper permissions to be setup for each resource/user. This includes making them in the "Project Manager" group and the "My Projects" and "My Resources" categories. The code wasn't very straight forward, but I got most of it working (creating the resource and making a resource a user). The part that doesn't work is the group and categories assignment. Here is the code:
SvcSecurity.SecurityGroupsDataSet sgDataSet = new SvcSecurity.SecurityGroupsDataSet();
//Get the security group
SvcSecurity.SecurityGroupsDataSet sglist = securityClient.ReadGroupList();
SvcSecurity.SecurityGroupsDataSet.SecurityGroupsRow groupDs = null;
foreach (SvcSecurity.SecurityGroupsDataSet.SecurityGroupsRow sg in sglist.SecurityGroups)
{
if (sg.WSEC_GRP_NAME == groupName)
{
groupDs = sg;|
}
}
SvcSecurity.SecurityGroupsDataSet ds = new SvcSecurity.SecurityGroupsDataSet();
// Specify which users belong to the new group.
SvcSecurity.SecurityGroupsDataSet ds = new SvcSecurity.SecurityGroupsDataSet();
// Specify which users belong to the new group.
SvcSecurity.SecurityGroupsDataSet.GroupMembersRow groupMembersRow = ds.GroupMembers.NewGroupMembersRow();
groupMembersRow.WSEC_GRP_UID = groupDs.WSEC_GRP_UID;
// Add the GUID of the resource to the group.
groupMembersRow.RES_UID = NewResGuid;
ds.GroupMembers.AddGroupMembersRow(groupMembersRow);
securityClient.SetGroups(ds);
SecurityGroupsDataSet.GroupMembersRow groupMembersRow = ds.GroupMembers.NewGroupMembersRow();
groupMembersRow.WSEC_GRP_UID = groupDs.WSEC_GRP_UID;
// Add the GUID of the resource to the group.
groupMembersRow.RES_UID = NewResGuid;
ds.GroupMembers.AddGroupMembersRow(groupMembersRow);
securityClient.SetGroups(ds);
The problem lies in the finding of the group. The DataSet that is returned returns the WSEC_GRP_UID. This particular column is NOT what the following AddGroupMembersRow call wants! It actually is looking for a second GUID in the database called WSEC_GRP_GUID. This is not returned in the PSI call and therefore, you have ZERO chance of successfully going through the PSI apis to get the id. You end up having to query the database directly…yuk.
Anyone that develops PSI out there? You really need to fix this…
Chris