How to hide git feature branches from other team? - security

I have a Azure DevOps Git repo on which two teams are currently working.
We created separate folders under 'feature/' for each team. Can we hide team1's feature folder from team-2?
Using git tf permission command, I was able to restrict the contributory access to other team's folders. But I just don't want the feature team folder visible to other team members.
Please click here to view my branch folder structure
As per the image, team-1 members should be able to see only 'feature/team-1/' branches. 'feature/team-2/' should not be visible to team-1 people.

It's NOT supported to hide specific branch for other team in Azure DevOps UI.
It's only supported to hide specific repo for one team, but cannot for branch level.

Related

Getting no email if I am an automatically added reviewer

In Azure DevOps Repos we are using branch protection and the "Include Automatically Code Reviewers" policy. As automatic reviewer we have created an Azure DevOps team to list all the possible reviewers.
If now a PR is created then this team is added automatically as a reviewer. But none of the people within that team get any notification that a review should be done.
Is that on purpose or just a wrong configuration or a bug?
Thank you
You need to set up Team Notifications in your project using Manage notifications for a team, group, or organization documentation page.

Azure Repos - allow co-workers to submit without pushing

I created an Azure repos (the first of my life ;-) and I have invited people to work on the project. They have a microsoft account. This is the free Azure environment.
I want to be notified when they submit their work and accept or reject it before I accept to commit the modification in the branches.
I am confused about the amount of working group options and I did not found the way to do what I want!
Does someone know what configuration must be done with their accounts / the Azure authorizations ?
Found :
Go to the Azure project settings and in the left column, click on repositories. Then, change the authorizations given to the groups - developpers. You can now allow contributors to check in but if you do so, they can check in and I have no way to accept or reject the modification. In the other way, if you select deny to push in, they cannot push anything at all.
Git on azure allows for code validation before to commit. TFS Doesn't. A work around is to create a pullrequest folder where contributors are allowed to push in and be notified each time someone pushes their code in it. Verify and then merge / push in the corresponding branch.

How can I add multiple projects on the same Azure DevOps Board?

I have two Projects in one Organization (like in the attached image below).
I would like to see the items from both Projects in the same Azure DevOps Board (dashboard).
Azure DevOps Boards (dashboards) show just the items from the selected Project.
How can I add items (User Stories) from both Projects to the same Azure DevOps Board?
(There is pretty good documentation on https://learn.microsoft.com/en-us/azure/devops/boards/?view=azure-devops but I did not find the answer)
How I can add multiple projects on the same Azure DevOps Board?
Just as we know, Azure DevOps Board is associated with an Iteration Path(Agile). An iteration path only exists within the context of a Team Project. So, Azure DevOps Board boards by their current implementation live only within a Team Project.
As a workaround, you can try to use the extension Delivery Plans, with Delivery Plans, you gain tailor-made views across several teams and their development backlogs—stories, features, or epics. You can use these views to drive alignment across teams by overlaying several backlogs onto your delivery schedule:
Check the document Managing project schedules across teams with Delivery Plans for some more details.
BTW, there is a user voice Single Dashboard for Multiple Projects, which is on the roadmap, you can vote and track the feedback from this ticket.
Hope this helps.
You cannot do that. I think you have to use one team project and several teams. Just create separate teams for each project. Azure DevOps will create an area path for each team. Then each team will use their own backlogs. In the default project team you can select "Include sub areas," and then you will see items for all teams (or projects).
Additional links:
Add a team, move from one default team to several teams
Define area paths and assign to a team

Hide repositories from menu on a project on Azure DevOps

I want to hide two repositories (App 1 and 2 below) from the menu on a project on Azure DevOps.
Select a project -> Repos -> below
The reason is that App 1 and 2 have code, but are not being used at the moment. So we will show them in the future. Thus, we want the ability to show/hide them.
Any idea?
You can go in your azure devops setting to edit your repository settings.
In this page you can manage all security options and allow specific user to work with your branches.
Some documentation from Microsoft website :
https://learn.microsoft.com/en-us/azure/devops/organizations/security/set-git-tfvc-repository-permissions?view=vsts&tabs=new-nav
I found out that you can disable the repository. This will keep listing your disabled repositories but no one can access them. Instead, the repository page just warns about its disabled status (see the picture below).
See this article that brings more detail and is the source of the images below.

Second FTP account for file accessing not possible, is there a workaround?

I am trying to give a designer access to specific folders within an Azure website I have. I would like for the designer to have access via FTP. However, according to this post, having multiple FTP user accounts on the same Azure website is not possible and the accepted answer suggests coming up with a "different way to manage" the website. This means that if you want collaboration on an Azure website, you have to share the entire directory structure. Please correct me if I am wrong.
I know you can download the Publish Profile settings from Azure as seen on this post. This does not solve the issue as the publish profile simple gives you the FTP credentials for a specific website (instead of all of your Azure websites) but still does not provide the option to create new FTP users with limited directory permissions.
So, my question is: is there some way to edit the Publish Profile settings when they are downloaded so folder access is limited? If not, what methods have you used for website development collaboration on Azure where certain folders should be hidden and protected?
For collaborative work with Azure Websites, you can enable source control. This includes tfs, git, dropbox, bitbucket, and codeplex. Dropbox is not the best collaborative tool, as it's not designed to be a version control system, but it's very convenient.
If you have a repository with any of the abovementioned providers, you can now give your designer their own account with the version control system.
You guys are right about using a source control system like GitHub instead of trying to provide access by creating a second FTP user.
Others have asked this question - not in the context of azure though.
This post talks about using submodules on github to give a contractor access to a subfolder and all folders / files under that sub folder.
SO - I believe linking azure to github would be necessary and then from there, creating and managing submodules from github would allow for collaboration. I believe a required aspect of this would be to have a private repo on github for the main repo. All of the files in the repo would otherwise be available for forking which would defeat the entire purpose of maintaining some discretion on access rights in the first place.

Resources