Begin of the insertion**As a** project portfolio managerEnd of the insertion Begin of the deletion Die Berechtigungen sollen weiter pro Attribut differenziert werden.End of the deletion

Begin of the insertion**I want to** set the permissions of a project attribute

**So that I** can ensure the users get the relevant information but only the information they need.

**Acceptance criteria**

End of the insertion * Begin of the insertionIn the project overview details page there is a tab "permission".End of the insertion Begin of the deletion LesenEnd of the deletion
* Begin of the insertionIn this tab the permissions are defined for all project roles (none, read, write) and for all global roles.
* In Administration -> Projects -> Project attritutes there is a menu entry "Permissions" showing a two dimensional permission table that givesEnd of the insertion Begin of the deletion Editieren

Die Einstellung erfolgtEnd of the deletion an Begin of the insertionoverview across all project attributes.

**Permission matrix example**

<figure class="table op-uc-figure_align-center op-uc-figure"><table class="op-uc-table"><thead class="op-uc-table--head"><tr class="op-uc-table--row"><th class="op-uc-table--cell op-uc-table--cell_head"><p class="op-uc-p"><br data-cke-filler="true"></p></th><th class="op-uc-table--cell op-uc-table--cell_head"><p class="op-uc-p">Attribute A</p></th><th class="op-uc-table--cell op-uc-table--cell_head"><p class="op-uc-p">Attribute B</p></th></tr></thead><tbody><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p"><strong>Project Roles</strong></p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p">Project Admin</p></td><td class="op-uc-table--cell"><p class="op-uc-p">write</p></td><td class="op-uc-table--cell"><p class="op-uc-p">write</p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p">Project Member</p></td><td class="op-uc-table--cell"><p class="op-uc-p">read</p></td><td class="op-uc-table--cell"><p class="op-uc-p">write</p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p">[...]</p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p"><strong>Global roles</strong></p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td><td class="op-uc-table--cell"><p class="op-uc-p"></p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p">Anonymous</p></td><td class="op-uc-table--cell"><p class="op-uc-p">none</p></td><td class="op-uc-table--cell"><p class="op-uc-p">none</p></td></tr><tr class="op-uc-table--row"><td class="op-uc-table--cell"><p class="op-uc-p">Non-member</p></td><td class="op-uc-table--cell"><p class="op-uc-p">read</p></td><td class="op-uc-table--cell"><p class="op-uc-p">read</p></td></tr></tbody></table></figure>

**Open**

* Migrations
* How to handle a very large number of roles and attributes in one table. We might need some filtering later.End of the insertion Begin of the deletion dem jeweiligen Projektattribut.



<img class="op-uc-image op-uc-image_inline" src="/api/v3/attachments/80697/content">End of the deletion