diff --git a/assets/images/help/business-accounts/project-visibility-change-drop-down.png b/assets/images/help/business-accounts/project-visibility-change-drop-down.png new file mode 100644 index 0000000000..1b672e9082 Binary files /dev/null and b/assets/images/help/business-accounts/project-visibility-change-drop-down.png differ diff --git a/content/admin/guides.md b/content/admin/guides.md index ffe7162789..5959ce4fd7 100644 --- a/content/admin/guides.md +++ b/content/admin/guides.md @@ -99,7 +99,7 @@ includeGuides: - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise - - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise + - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-team-policies-in-your-enterprise - /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise diff --git a/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise.md b/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise.md index 9b5984af19..897ffc7acf 100644 --- a/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise.md +++ b/content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise.md @@ -796,9 +796,9 @@ Before you'll see `git` category actions, you must enable Git events in the audi | Action | Description |--------|------------- -| `organization_projects_change.clear` | An enterprise owner{% ifversion ghes %} or site administrator{% endif %} cleared the policy setting for organization-wide project boards in an enterprise. For more information, see "[Enforcing a policy for organization-wide project boards](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." -| `organization_projects_change.disable` | Organization projects were disabled for all organizations in an enterprise. For more information, see "[Enforcing a policy for organization-wide project boards](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." -| `organization_projects_change.enable` | Organization projects were enabled for all organizations in an enterprise. For more information, see "[Enforcing a policy for organization-wide project boards](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." +| `organization_projects_change.clear` | An enterprise owner{% ifversion ghes %} or site administrator{% endif %} cleared the policy setting for organization-wide project boards in an enterprise. For more information, see "[Enforcing policies for projects in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." +| `organization_projects_change.disable` | Organization projects were disabled for all organizations in an enterprise. For more information, see "[Enforcing policies for projects in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." +| `organization_projects_change.enable` | Organization projects were enabled for all organizations in an enterprise. For more information, see "[Enforcing policies for projects in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards)." {%- endif %} ## `packages` category actions @@ -1113,7 +1113,7 @@ Before you'll see `git` category actions, you must enable Git events in the audi | Action | Description |--------|------------- -| `repository_projects_change.clear` | The repository projects policy was removed for an organization, or all organizations in the enterprise. Organization admins can now control their repository projects settings. For more information, see "[Enforcing project board policies in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise)." +| `repository_projects_change.clear` | The repository projects policy was removed for an organization, or all organizations in the enterprise. Organization admins can now control their repository projects settings. For more information, see "[Enforcing policies for projects in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise)." | `repository_projects_change.disable` | Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise. | `repository_projects_change.enable` | Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise. diff --git a/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise.md b/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise.md new file mode 100644 index 0000000000..3561e7bf12 --- /dev/null +++ b/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise.md @@ -0,0 +1,73 @@ +--- +title: Enforcing policies for projects in your enterprise +intro: 'You can enforce policies for {% data variables.projects.projects_v2_and_v1 %} within your enterprise''s organizations, or allow policies to be set in each organization.' +permissions: Enterprise owners can enforce policies for projects in an enterprise. +redirect_from: + - /articles/enforcing-project-board-settings-for-organizations-in-your-business-account + - /articles/enforcing-project-board-policies-for-organizations-in-your-enterprise-account + - /articles/enforcing-project-board-policies-in-your-enterprise-account + - /github/setting-up-and-managing-your-enterprise-account/enforcing-project-board-policies-in-your-enterprise-account + - /github/setting-up-and-managing-your-enterprise/enforcing-project-board-policies-in-your-enterprise-account + - /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-project-board-policies-in-your-enterprise-account + - /admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise +versions: + ghec: '*' + ghes: '*' + ghae: '*' +type: how_to +topics: + - Enterprise + - Policies + - Projects +shortTitle: Project board policies +--- + +## About policies for projects in your enterprise + +You can enforce policies to control how enterprise members manage {% data variables.projects.projects_v2_and_v1 %}, or you can allow organization owners to manage policies for {% data variables.projects.projects_v2_and_v1 %} at the organization level.{% ifversion project-visibility-policy %} + +Some policies apply to both {% data variables.product.prodname_projects_v2 %}, the new projects experience, and {% data variables.product.prodname_projects_v1 %}, the previous experience, while some apply only to {% data variables.product.prodname_projects_v1 %}. For more information about each experience, see "[About {% data variables.product.prodname_projects_v2 %}](/issues/planning-and-tracking-with-projects/learning-about-projects/about-projects)" and "[About {% data variables.product.prodname_projects_v1 %}](/issues/organizing-your-work-with-project-boards/managing-project-boards/about-project-boards)." +{% else %}For more information, see "[About project boards](/issues/organizing-your-work-with-project-boards/managing-project-boards/about-project-boards)."{% endif %} + +## Enforcing a policy for organization-wide projects + +Across all organizations owned by your enterprise, you can enable or disable organization-wide project boards, or allow owners to administer the setting on the organization level. + +{% data reusables.enterprise-accounts.access-enterprise %} +{% data reusables.enterprise-accounts.policies-tab %} +{% data reusables.enterprise-accounts.projects-tab %} +4. Under "Organization projects", review the information about changing the setting. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %} +5. Under "Organization projects", use the drop-down menu and choose a policy. + ![Drop-down menu with organization project board policy options](/assets/images/help/business-accounts/organization-projects-policy-drop-down.png) + +{% ifversion project-visibility-policy %} +## Enforcing a policy for visibility changes to projects + +Across all organizations owned by your enterprise, you can enable or disable the ability for people with admin access to a project to change the visibility of the project, or you can allow owners to administer the setting on the organization level. + +{% data reusables.enterprise-accounts.access-enterprise %} +{% data reusables.enterprise-accounts.policies-tab %} +{% data reusables.enterprise-accounts.projects-tab %} +1. Under "Project visibility change permission", review the information about changing the setting. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %} +1. Select the dropdown menu, then click a policy. + + ![Screenshot of the dropdown menu for configuring the "Project visibility change permission" policy](/assets/images/help/business-accounts/project-visibility-change-drop-down.png) +{% endif %} + +{% ifversion projects-v1 %} +## Enforcing policies for {% data variables.product.prodname_projects_v1 %} + +Some policies apply only to {% data variables.product.prodname_projects_v1 %}. + +### Enforcing a policy for repository projects + +Across all organizations owned by your enterprise, you can enable or disable repository-level projects, or allow owners to administer the setting at the organization level. + +{% data reusables.enterprise-accounts.access-enterprise %} +{% data reusables.enterprise-accounts.policies-tab %} +{% data reusables.enterprise-accounts.projects-tab %} +4. Under "Repository projects", review the information about changing the setting. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %} +5. Under "Repository projects", use the drop-down menu and choose a policy. + + ![Drop-down menu with repository project board policy options](/assets/images/help/business-accounts/repository-projects-policy-drop-down.png) +{% endif %} \ No newline at end of file diff --git a/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise.md b/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise.md deleted file mode 100644 index 92779bbbf0..0000000000 --- a/content/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise.md +++ /dev/null @@ -1,48 +0,0 @@ ---- -title: Enforcing project board policies in your enterprise -intro: 'You can enforce policies for projects within your enterprise''s organizations, or allow policies to be set in each organization.' -permissions: Enterprise owners can enforce policies for project boards in an enterprise. -redirect_from: - - /articles/enforcing-project-board-settings-for-organizations-in-your-business-account - - /articles/enforcing-project-board-policies-for-organizations-in-your-enterprise-account - - /articles/enforcing-project-board-policies-in-your-enterprise-account - - /github/setting-up-and-managing-your-enterprise-account/enforcing-project-board-policies-in-your-enterprise-account - - /github/setting-up-and-managing-your-enterprise/enforcing-project-board-policies-in-your-enterprise-account - - /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-project-board-policies-in-your-enterprise-account -versions: - ghec: '*' - ghes: '*' - ghae: '*' -type: how_to -topics: - - Enterprise - - Policies - - Projects -shortTitle: Project board policies ---- - -## About policies for project boards in your enterprise - -You can enforce policies to control how members of your enterprise on {% data variables.product.product_name %} manage project boards. You can also allow organization owners to manage policies for project boards. For more information, see "[About project boards](/issues/organizing-your-work-with-project-boards/managing-project-boards/about-project-boards)." - -## Enforcing a policy for organization-wide project boards - -Across all organizations owned by your enterprise, you can enable or disable organization-wide project boards, or allow owners to administer the setting on the organization level. - -{% data reusables.enterprise-accounts.access-enterprise %} -{% data reusables.enterprise-accounts.policies-tab %} -{% data reusables.enterprise-accounts.projects-tab %} -4. Under "Organization projects", review the information about changing the setting. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %} -5. Under "Organization projects", use the drop-down menu and choose a policy. - ![Drop-down menu with organization project board policy options](/assets/images/help/business-accounts/organization-projects-policy-drop-down.png) - -## Enforcing a policy for repository project boards - -Across all organizations owned by your enterprise, you can enable or disable repository-level project boards, or allow owners to administer the setting on the organization level. - -{% data reusables.enterprise-accounts.access-enterprise %} -{% data reusables.enterprise-accounts.policies-tab %} -{% data reusables.enterprise-accounts.projects-tab %} -4. Under "Repository projects", review the information about changing the setting. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %} -5. Under "Repository projects", use the drop-down menu and choose a policy. - ![Drop-down menu with repository project board policy options](/assets/images/help/business-accounts/repository-projects-policy-drop-down.png) diff --git a/content/admin/policies/enforcing-policies-for-your-enterprise/index.md b/content/admin/policies/enforcing-policies-for-your-enterprise/index.md index b226150160..0b01d039df 100644 --- a/content/admin/policies/enforcing-policies-for-your-enterprise/index.md +++ b/content/admin/policies/enforcing-policies-for-your-enterprise/index.md @@ -16,7 +16,7 @@ children: - /about-enterprise-policies - /enforcing-repository-management-policies-in-your-enterprise - /enforcing-team-policies-in-your-enterprise - - /enforcing-project-board-policies-in-your-enterprise + - /enforcing-policies-for-projects-in-your-enterprise - /restricting-email-notifications-for-your-enterprise - /enforcing-policies-for-security-settings-in-your-enterprise - /enforcing-policies-for-dependency-insights-in-your-enterprise diff --git a/content/issues/planning-and-tracking-with-projects/managing-your-project/managing-visibility-of-your-projects.md b/content/issues/planning-and-tracking-with-projects/managing-your-project/managing-visibility-of-your-projects.md index 5d8c6bd7ab..d08df1f06c 100644 --- a/content/issues/planning-and-tracking-with-projects/managing-your-project/managing-visibility-of-your-projects.md +++ b/content/issues/planning-and-tracking-with-projects/managing-your-project/managing-visibility-of-your-projects.md @@ -22,7 +22,7 @@ Only the project visibility is affected; to view an item on the project, someone ![Project with hidden item](/assets/images/help/projects/hidden-items.png) -Project admins and organization owners can control project visibility. Organization owners can restrict the ability to change project visibility to just organization owners. +Project admins and organization owners can control project visibility. Organization owners{% ifversion project-visibility-policy %} and enterprise owners{% endif %} can restrict the ability to change project visibility to just organization owners. In public and private projects, insights are only visible to users with write permissions for the project. diff --git a/content/organizations/managing-organization-settings/allowing-project-visibility-changes-in-your-organization.md b/content/organizations/managing-organization-settings/allowing-project-visibility-changes-in-your-organization.md index abcb34546b..3224a89600 100644 --- a/content/organizations/managing-organization-settings/allowing-project-visibility-changes-in-your-organization.md +++ b/content/organizations/managing-organization-settings/allowing-project-visibility-changes-in-your-organization.md @@ -11,10 +11,18 @@ allowTitleToDifferFromFilename: true permissions: Organization owners can allow {% data variables.projects.project_v2_and_v1 %} visibility changes for an organization. --- +## About visibility changes for projects + You can restrict who has the ability to change the visibility of {% data variables.projects.projects_v2_and_v1 %} in your organization, such as restricting members from changing {% data variables.projects.projects_v2_and_v1 %} from private to public. You can limit the ability to change {% data variables.projects.project_v2_and_v1 %} visibility to just organization owners, or you can allow anyone granted admin permissions to change the visibility. +{% ifversion project-visibility-policy %} +This option may not be available to you if an enterprise owner restricts visibility changes for {% data variables.projects.projects_v2_and_v1 %} at the enterprise level. For more information, see "[Enforcing policies for projects in your enterprise](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise)." +{% endif %} + +## Allowing members to change project visibilities + {% data reusables.profile.access_org %} {% data reusables.profile.org_settings %} 1. In the "Code, planning, and automation" section of the sidebar, click **{% octicon "table" aria-label="The table icon" %} Projects**. diff --git a/data/features/project-visibility-policy.yml b/data/features/project-visibility-policy.yml new file mode 100644 index 0000000000..53f311f1e1 --- /dev/null +++ b/data/features/project-visibility-policy.yml @@ -0,0 +1,4 @@ +# Issue 7923 +# Project visibility change permission policy +versions: + ghec: '*' diff --git a/tests/fixtures/versionless-redirects.txt b/tests/fixtures/versionless-redirects.txt index ef00c5335c..2631a91c4e 100644 --- a/tests/fixtures/versionless-redirects.txt +++ b/tests/fixtures/versionless-redirects.txt @@ -90,7 +90,7 @@ - /github/setting-up-and-managing-your-enterprise/enforcing-team-policies-in-your-enterprise-account - /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-team-policies-in-your-enterprise-account -/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-project-board-policies-in-your-enterprise +/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise - /articles/enforcing-project-board-settings-for-organizations-in-your-business-account - /articles/enforcing-project-board-policies-for-organizations-in-your-enterprise-account - /articles/enforcing-project-board-policies-in-your-enterprise-account