CODEWITHSUNDEEP
visual-studiodeploymenttfs
Andrew Dunaway
Andrew Dunaway

Reputation: 1226

Is there a way in Team Foundation Server 2008 to limit who can start a build by user?

I have two build definitions in TFS, one for QA and one for Production. I would like to make it so that developers can deploy to QA, but so that only my IT Admin can run the Production deploy. It doesn't have to be locked down, but more of a safety guard so I don't mis-click or accidentally kick off a production deploy.

Ideally it would be nice to link this to the windows user, but I am open to other suggestions if it still meets the needs.

Upvotes: 0

Views: 70

Answers (1)

Vaccano
Vaccano

Reputation: 82341

You can control who can queue a build. But once someone has rights to start a build they can start any build. So if you had a QA Build and a Prod build you could give rights to both or neither, but not one or the other.

These rights are controlled by right clicking on a project in Team Explorer and selecting Team Project Settings and then Security or Group Membership.

Edit: You could change the permissions on the build definition in source control to not allow the restricted user to see the build definition file for the prod build. This was discussed on this MSDN thread. I am not 100% sure that would work, but it could prevent accidents.

Upvotes: 1

Related Questions