In the New (UX), some users are unable to edit tasks as they are not automatically granted the 'Project - Task Management' Right

Document ID : KB000092907
Last Modified Date : 16/06/2018
Show Technical Document Details
Issue:
If a user is added to a project team via the Classic UI or if the user is added using the role replace functionality (in the New UX or Classic UI), the user is unable to edit tasks for that project in the New User Experience (UX). This is due to the resource not automatically being granted the access right 'Project - Task Management access' at the Instance level for that project. The user is therefore unable to edit tasks on either the Task Board or List view.

One of the following errors is generated when you try to edit a task:
"API-1007: You are not authorized to process request. Contact your system administrator for necessary security rights" or "Error: Project.tasks.errors.couldNotPatchCard"

Steps to Reproduce:

1. Create a new project in the New User Experience with at least one task
2. Create a new user in PPM with the following access: 
  • Project Management - Navigate (Global level)
  • Projects - Navigate (Global level)
  • Project - View - Instance level to the project created in Step 1
3. In the New UX, click the 'Resource Staffing' icon on the left hand menu
4. In the 'Investments to Resources' portlet, expand the project created in step 1 and click the + icon next to the project name
5. In the 'Search roles' field enter a role name (In this example, Project Manager) then click the role to add it to the project
6. In the 'Investments to Resources' portlet, click on the role that was just added to the project which will bring up the role details window on the right hand side
7. In the 'Allocate To' field, replace the role with the resource created in Step 2
8. Click 'Confirm Allocation' to complete the role replace
9. Login as the user created in Step 2 and navigate to the 'Tasks' section of the project created above
10. From the List view, attempt to change the status of a task. Or, from the Board view, attempt to move a task in one of the columns to a different column (example: move a task from 'Incoming' to 'Waiting to Pull')

Expected Results: Task moves successfully

Actual Results: Receive one of the following error messages and you are unable to edit the task. "API-1007: You are not authorized to process request. Contact your system administrator for necessary security rights" or "Error: Project.tasks.errors.couldNotPatchCard"

Additionally, you can see that the access right "Project - Task Management" does not show up in the instance level access rights for the user, which is what is preventing the user from being able to edit tasks. You can see this by taking the following steps:
1. In the Classic UI, go to Administration->Resources and click on the resource name
2. From the 'Resource's Access Rights' tab drop down, select 'Instance'
You will see that the access right 'Project - Task Management' is missing (Or if the user was already added correctly for other projects by adding them directly to a New UX's project team, if you click on the link to the 'Project - Task Management' the project in the steps above is missing in the user's access).
Cause:
This is working as designed. Currently, team members are only automatically granted the access right 'Project - Task Management' if they are added to a project directly from the 'Conversations' section of the project in the New UX or if the team member is assigned to tasks on the Project Tasks list or board views in the New UX.
 
Resolution:

For any team members that were not added to the project via the 'Conversations' section of the project in the New UX, use one of the below options to grant the access to the user:

Option 1: Assign the resource to any task on the project via the New UX. The user will then have access to all the tasks on that specific project.

Option 2: Manually add the access right using the following steps:
1. In the Classic UI, go to Administration->Resources and click on the resource name
2. From the 'Resource's Access Rights' tab drop down, select 'Instance'
3. Click 'Add'
4. For Object, select Project and click 'Next'
5. Check the check box next to 'Project - Task Management' and click 'Add and Continue'
6. Check the check box next to the project the user should have the access for
7. Click 'Add' 

Note: To grant this access to multiple projects at the same time, the 'Project - Task Management' access right is not yet available at the global level, but you can grant this level at the OBS level for resources to allow them to have this access to all projects in the same OBS. 

Additional Information:

Reference New User Experience: Compare with Classic CA PPM - Team Member  for more details on New UX Team member access rights
Reference KB000006279 - Unable to edit task dates in some projects in the New User Experience