Implementing All Except Permissions in TeamCity

Question

TeamCity Enterprise 7.1.3 currently has the following build chains for most of our applications.

Artifact building> deployment in dev> dev acceptance tests> deployment for integration> integration acceptance tests

Developers have been configured as system administrators, since we have development and integration environments. However, now we want to add the “deploy for testing” project and restrict access rights to several people.

I created roles that have permissions explicitly set for all projects except "deploy to test". It works, but with ninety (and growing) projects it is not very convenient. Each time a new project is created, permissions must be added to these roles.

So my question is: is there a way in TeamCity to set the role as "deploy for testing" so that when new projects are added, the role automatically has permissions? If there is no best practice to manage this, or do I just need to keep changing permissions when adding projects?

Answer 1

In TeamCity 7.1.3, you cannot achieve what you ask. The only way to do this is to add permissions when adding projects. However, if you upgrade to TeamCity 8.x, there is now a concept for a project hierarchy. You can grant permissions at any level, and permissions are inherited to subprojects. For instance:

• Project A
  • Subproject 1
  • Subproject 2
• Project B

If you give developer permissions to project A, then add a new subproject:

• Project A
  • Subproject 1
  • Subproject 2
  • Subproject 3
• Project B

You will have permission for all 3 subprojects in project A without changing the permission model. This should achieve exactly what you need.