Canarys User Validate
The Canarys User Validate is an Azure DevOps Extension crafted to validate users' actions. Its primary objective is to ensure that work items can only be edited by the individuals assigned to them or those who created them, thus preventing unauthorized users from making updates and saving work items.
How it Works
Within Azure DevOps, whenever a user attempts to open or modify a field within a work item, this extension scrutinizes the user's credentials. It assesses whether the current user possesses the requisite permissions to make changes to the work item, determining this by checking if the user is either assigned to the work item or is its creator. Based on this assessment, the extension either grants or restricts the user's ability to save the work item.
If the user lacks both assignment and creation privileges for the work item, the extension takes proactive measures. It disables the save button and displays a clear error message, informing the user that they lack authorization to edit the work item. This is illustrated in the figure.
Conversely, if the user is indeed assigned to or has created the work item, the extension promptly removes any existing errors and re-enables the save button.
The tool actively functions when work items are loaded, reset, updated, refreshed, or saved.
Share your experiences, feature requests and feedback on our email firstname.lastname@example.org with the subject line "Canarys User Validate".