Hello,
I have added two domain groups in [Team Project] \Contributors group, but users received the error message:
"TF24042 You do not have permission to create work items in project ...".
Users cannot see any work item created for that Team Project.
Please, could you help me
Thanks
Montse

Error TF24042
jbujold
Fern.Andy
How long ago did you add the domain groups to the contributors group We have a delay between add and actual permissions propagation since we cache the AD data in TFS. Try adding a user directly to the Contributors group to see if that resolves the issue
Cheers,
Adam
mario.muja
This may not solve your issue, but I wanted to clarify something. The permission required to view work items is not 'view project level information'. You need to right-click on a project and go to Areas and Iterations. There, select an Area node (root will apply for the whole project) and click security. In the dialog that comes up, there are two permissions for work items -> View Work Items and Edit Work Items. These are the only two permissions that the work item tracking component validates.
Thanks,
KDR88
Thanks Adam. I have added the group this morning, but I have also tried adding a user and it didn't work. I did this task in the past and it always worked adding users. I have upgraded Team Foundation from the Trial version about 3 months ago. Do you think that this could impact any Team foundation server service and the security is not working appropiately
Thanks,
Montse
PublicError
Hi Adam,
Yes, the contributors group have the "View project level information" permission.
The Team Foundation server machine displays the following application event log:
TF53010: An unexpected condition has occurred in a Team Foundation component. The information contained here should be made available to your site administrative staff.
Technical Information (for the administrative staff):
Date (UTC): 11/15/2006 7:50:16 AM
Machine: QARTFS
Application Domain: /LM/W3SVC/3/Root/WorkItemTracking-2-128080506014814084
Assembly: Microsoft.TeamFoundation.WorkItemTracking.Server.DataServices, Version=8.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a; v2.0.50727
Process Details:
Process Name: w3wp
Process Id: 9604
Thread Id: 9116
Account name: DS\montserrat.martinez
Detailed Message: LookupRule: Change was not made. Rule tree scope invalid
Exception Message: LookupRule: Change was not made. Rule tree scope invalid (type ValidationException)
Exception Stack Trace: at Microsoft.TeamFoundation.WorkItemTracking.Server.SqlAccess.HandleDalError(Exception e)
at Microsoft.TeamFoundation.WorkItemTracking.Server.SqlAccess.ExecuteBatchPayloadImpl(IRequestContext context, String sqlBatch, List`1 parameterList, Boolean& errorOnBulkUpdate, String connectionString)
at Microsoft.TeamFoundation.WorkItemTracking.Server.SqlBatchBuilder.ExecuteBatchInternal(IRequestContext context, Boolean passInConnectionInfo, String server, String database)
at Microsoft.TeamFoundation.WorkItemTracking.Server.DataAccessLayerImpl.UpdateImpl(String serverName, String databaseName, String attachmentServer, String attachmentDatabase, XmlElement updateElement, MetadataTable[] tablesRequested, Int64[] rowVersions, Payload metadataPayload, Boolean bisNotification, String& dbStamp, Boolean bulkUpdate, Boolean& bulkUpdateSuccess, String userSid)
at Microsoft.TeamFoundation.WorkItemTracking.Server.DataAccessLayerImpl.Update(String serverName, String databaseName, String attachmentServer, String attachmentDatabase, XmlElement updateElement, MetadataTable[] tablesRequested, Int64[] rowVersions, Payload metadataPayload, Boolean bisNotification, String& dbStamp, String userSid)
at Microsoft.TeamFoundation.WorkItemTracking.Server.ProcessSecurityEventMessage.ExecuteBatch(String updateXml)
at Microsoft.TeamFoundation.WorkItemTracking.Server.ProcessSecurityEventMessage.Process()
at Microsoft.TeamFoundation.WorkItemTracking.Server.SecurityEventMessage.Process()
at Microsoft.TeamFoundation.WorkItemTracking.Server.EventMessageHandler.ProcessSecurity(Int32 seqId)
at Microsoft.TeamFoundation.WorkItemTracking.Server.EventMessageHandler.ProcessSecurityEvent()
Inner Exception Details:
Exception Message: LookupRule: Change was not made. Rule tree scope invalid (type SqlException)
SQL Exception Class: 11
SQL Exception Number: 600046
SQL Exception Procedure: LookupRule
SQL Exception Line Number: 310
SQL Exception Server: QARTFS
SQL Exception State: 1
SQL Error(s):
Exception Data Dictionary:
HelpLink.ProdName = Microsoft SQL Server
HelpLink.ProdVer = 09.00.1399
HelpLink.EvtSrc = MSSQLServer
HelpLink.EvtID = 600046
HelpLink.BaseHelpUrl = http://go.microsoft.com/fwlink
HelpLink.LinkId = 20476
Exception Stack Trace: at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at System.Data.SqlClient.SqlDataReader.HasMoreResults()
at System.Data.SqlClient.SqlDataReader.NextResult()
at Microsoft.TeamFoundation.WorkItemTracking.Server.PayloadTableCollection.Populate(SqlDataReader reader)
at Microsoft.TeamFoundation.WorkItemTracking.Server.SqlAccess.ExecuteBatchPayloadImpl(IRequestContext context, String sqlBatch, List`1 parameterList, Boolean& errorOnBulkUpdate, String connectionString)
Please, could you help me
Thanks a lot,
Montse
Wolfgang Kamir
Karthik is correct on the work item editing permissions that the Contributors group requires. This may or may not be your problem here.
On the event log error - can you share your work item type definition with us please so that we can help debug this issue I'll also get a few other folks to take a look at this problem.
Thanks,
Alan Finney
I'm using a customized template. I have created using the "Process Template Editor".
Any idea how to find the error
Regards,
Montse
sagittarian
I think you hitting a known issue. Please refer to the following topic for more details.
http://forums.microsoft.com/MSDN/ShowPost.aspx PostID=790131&SiteID=1
winprock
Hardrock302
Does your Contributors group have the "View project level information" permission I think that's what's necessary to create work items.
I don't believe the upgrade should have any effect on these particular permissions, though I haven't done much testing of such situations myself so can't be positive.
Are there any messages in the event log on the Application Tier It may be having trouble syncing new users, for example, and would log that in the machine's application event log.
Cheers,
Adam