+1 703.350.4150
TFS Permissions
by Alena Semeshko
on TFS permissions and lists some principles to keep in mind when working with permissions. Here’s his list of best practices when it comes to working with the most problematic permissions area, version control specific permission issues :
1. Set as few permissions as possible. Ideally, you would set permissions on server, project and immediate project subfolders at most (and set server/project permissions by assignment to appropriate pre-defined groups). That way you will be able to immediately know where to look for the “root” of any permission problem.
2. Never set permission on files (that can be viewed as more of the same topic as in previous paragraph, but I cannot say that enough).
3. Use inheritance as much as possible; start with most permissive set-up and partition by using Deny.
4. If you find yourself setting certain permissions more than once, script them using tf permissions (use tfssecurity for global and area permissions). In this way potential for human error is minimized.
entries or 
